6 min read
GPT-5.2 now runs on Top Secret data behind a zero-connectivity air gap
Frontier AI models have been locked out of classified government environments by design—no internet means no model updates. Microsoft just solved the…
Mo Wasay
3 min read
BASF wants a cut of every Face ID unlock since 2017
Nine years after the iPhone X debut, the chemical giant is suing over Face ID patents. The timing isn't an oversight —…
4 min read
Three things change when your AI is rated ‘critical’ — and ‘AGI’ isn’t one of them
A model can be genuinely more capable, genuinely worth gating, and still not be a general intelligence. All three are true of…
6 min read
I turned on secret scanning. 8.8 million people are why you should too
Manchester Airports Group refused to pay ransomware actors and watched 550GB of data—covering 8.8 million people—hit the internet. The entry point was…
7 min read
I hit SharePoint’s auto-labeling scope ceiling. Here’s what Roadmap 570445 fixes.
The policy saved fine and showed "on." What it didn't do was cover the sites I needed — I'd hit a scope…
7 min read
SMS Codes Just Got an SLA: Native-App MFA Goes GA in Entra External ID
Step-up MFA for Native Authentication in Entra External ID reaches GA. Add email or SMS second-factor to mobile apps without browser redirects—but…
6 min read
Two iPhones, One Number: Which of Your Controls Actually Breaks?
iOS 27's iPhone Handoff feature won't break your MDM enrollment. It will break the assumption three layers down in your auth stack…
4 min read
Prompt guardrails are dead. The data layer won.
System prompts are suggestions, and app-layer approval breaks the moment an agent chains tool calls without returning to a human. The only…
7 min read
An unauthenticated SQL injection is dropping reverse shells on Switchvox PBXes right now
CVE-2026-9586 chains unauthenticated SQL injection to code execution to reverse shell deployment in Sangoma Switchvox VoIP systems, and attackers are exploiting it…
4 min read
The .onmicrosoft.com Free Ride Ended This Month, and Teams Is the Bouncer
If your M365 tenant has never added a verified custom domain and every user still signs in with a .onmicrosoft.com address, Teams…