4 min read
Three things change when your AI is rated ‘critical’ — and ‘AGI’ isn’t one of them
A model can be genuinely more capable, genuinely worth gating, and still not be a general intelligence. All three are true of…
Month: <span>September 2026</span>
6 min read
I turned on secret scanning. 8.8 million people are why you should too
Manchester Airports Group refused to pay ransomware actors and watched 550GB of data—covering 8.8 million people—hit the internet. The entry point was…
7 min read
I hit SharePoint’s auto-labeling scope ceiling. Here’s what Roadmap 570445 fixes.
The policy saved fine and showed "on." What it didn't do was cover the sites I needed — I'd hit a scope…
6 min read
Two iPhones, One Number: Which of Your Controls Actually Breaks?
iOS 27's iPhone Handoff feature won't break your MDM enrollment. It will break the assumption three layers down in your auth stack…
4 min read
Prompt guardrails are dead. The data layer won.
System prompts are suggestions, and app-layer approval breaks the moment an agent chains tool calls without returning to a human. The only…
7 min read
An unauthenticated SQL injection is dropping reverse shells on Switchvox PBXes right now
CVE-2026-9586 chains unauthenticated SQL injection to code execution to reverse shell deployment in Sangoma Switchvox VoIP systems, and attackers are exploiting it…
4 min read
The .onmicrosoft.com Free Ride Ended This Month, and Teams Is the Bouncer
If your M365 tenant has never added a verified custom domain and every user still signs in with a .onmicrosoft.com address, Teams…
4 min read
One Azure Front Door profile can now run a different WAF policy on every route
Azure Front Door used to force you into multiple profiles if you wanted different WAF rules for different apps. The new profile-level…
7 min read
I tested credit freeze vs. monitoring after 153M licenses leaked. What actually works
The scary number isn't 153 million—it's zero organizations admitting the breach. I tested credit freeze against monitoring for a week to see…
8 min read
Google, Facebook and Apple login now works inside your app — no browser bounce
The ugliest part of mobile sign-in has been the bounce to a system browser and back. Entra External ID just shipped GA…