3 min read
I audited a ‘three zones everywhere’ estate. Half bought resilience it couldn’t use.
Zone resiliency is a per-component decision, not a per-workload one. Most estates have it backwards: three zones on the tier that didn't…
3 min read
Zone resiliency is a per-component decision, not a per-workload one. Most estates have it backwards: three zones on the tier that didn't…
I audited a ‘three zones everywhere’ estate. Half bought resilience it couldn’t use.
9 min read
The rejection email arrives at 2 a.m. after your build bounces with a signing error nobody saw in beta. Now that iOS…
Xcode 27 or stay on 26? What changes when signing for iOS 27
7 min read
The first thing it did was try to accept a cookie banner. The second was almost log into the wrong tenant. That's…
The Assistant Is Dead. The Operator Clocked In.
4 min read
Windows endpoints have ignored what's inside your .zip and .rar files. In December, Purview DLP starts looking, and rules that never fired…
Three things that break when Endpoint DLP opens your .zip files in November
4 min read
Azure Storage's new user-bound SAS tokens tie access to a live Entra principal, not just the token string. Revoke the identity and…
Three ways a leaked SAS token bites you — user-bound delegation closes one
4 min read
Everyone's reading the TechCrunch story as "hackers found a way into Claude." They didn't — they found credentials sitting where they shouldn't,…
Three boring reasons your Claude tokens vanished overnight
4 min read
Microsoft's September Patch Tuesday shipped 974 CVEs—more than double the previous record—but only two are under active exploitation. Here's how to triage…
The Number Is Not the Emergency: How to Triage a 974-CVE Patch Tuesday
7 min read
CAE is supposed to kill compromised tokens in minutes, not hours. But security researchers found inconsistent implementation across Microsoft's first-party apps—which means…
You Clicked “Revoke Sessions.” How Long Until the Token Actually Dies?
7 min read
Managed identities can now authenticate to app registrations across tenant boundaries using federated credentials. The GA release means you can finally delete…
The 90-Day Secret Rotation Ticket Is Now Optional Across Tenants
6 min read
Your AI models are moving to factory floors, retail edge devices, and sovereign clouds you can't touch. Before you release model weights…
A TPM Quote Stands Between Your Model Weights and a Stranger’s GPU