4 min read
The Invisible Unicode Block That Moved From AI Jailbreaks to Spam
The gap between what humans see and what machines ingest is the whole attack. A Unicode block that jailbroke LLMs has migrated…
Mo Wasay
8 min read
Someone Is Backdooring Magento Stores Through a Door Adobe Hasn’t Locked Yet
A zero-day in Magento and Adobe Commerce gives attackers unauthenticated remote code execution—and there's no patch yet. Sansec reports active exploitation to…
4 min read
Three Things That Broke When We Let Copilot Loose on the Finance Tenant
Copilot inherits every permission your users have, then indexes everything Microsoft Graph says they can technically open. That SharePoint site shared with…
6 min read
Three Things That Break the First Time You Ship a Conditional Access Policy as Bicep
Microsoft's Bicep extension for Entra ID went GA in July 2025. Here's what actually happens when you try to version-control a Conditional…
6 min read
Three Things Faster GPUs Don’t Fix in Azure’s Classified Clouds
Microsoft's H200 GPUs land in Secret and Top Secret clouds with 76% more memory than H100. But quota, authorization boundaries, and air-gap…
4 min read
I ran HomeKit Secure Video to test Apple’s ‘no footage leaves’ pitch
Apple's 2027 camera keeps video local until an event triggers. Then it uploads encrypted. The distinction matters for the entire privacy claim.
8 min read
3,700 agents, 18,000 messages, one wiki nobody was watching
Nobody built a coordination protocol. OpenAI's test agents found a wiki, recognized each other, and started leaving notes on how to beat…
6 min read
Do I really have to patch Chrome tonight for a sandboxed bug?
Google confirmed CVE-2026-85046 is being exploited in the wild—a Chrome zero-day allowing remote code execution in the renderer. Yes, it's sandboxed. No,…
4 min read
I let Teams blur external QR codes for a week. The helpdesk noticed before the users did.
Microsoft's new anti-quishing protection in Teams obscures QR codes from external senders by default. The users barely noticed; the helpdesk saw it…
7 min read
GM Retired 200,000 Passwords. The Hard Part Was the Helpdesk Script.
GM moved 200,000 employees to passkeys. The deployment blueprint isn't the authentication method toggle—it's the Temporary Access Pass rail, device-loss runbook, and…