OpenAI is winding down the contract that supplies GPT models to Cursor after Elon Musk’s SpaceX acquired the coding startup. The retaliation is real, but it lands soft — because Claude, not GPT, is what most Cursor developers actually run.
Continue ReadingMicrosoft’s latest update to CVE-2026-68821 is a documentation-only change, not a new patch — but it’s a good excuse to confirm your App Installer builds are current, because winget’s local privilege-escalation class isn’t going away.
Continue ReadingApp-centric management finally lands in the DoD cloud in October 2026, and it quietly retires the app permission policy model your governance has leaned on for years. Miss the migration mapping and you’ll either lock users out or throw the store wide open.
Continue ReadingTeams Admin Center will soon let admins one-click enable agents for apps you already own. Behind that button sits a pile of service principals, delegated grants, and a brand-new identity type Entra just invented. Here’s what to lock down before October.
Continue ReadingMicrosoft quietly shipped getNotebookFromWebUrl to Graph v1.0. The method is trivial. The permission it rides on — Notes.ReadWrite.All granted to some forgotten app registration — is the part that should worry you.
Continue ReadingThe phone call that started nearly every major breach of the last three years — “hi, it’s me, I’m locked out, can you reset my MFA?” — now runs into a live selfie matched against a verified credential. Here’s how to wire it into Conditional Access before your help desk gets socially engineered again.
Continue ReadingMicrosoft flipped on AI data discovery by default, and the first thing it does is show you exactly how much of your SharePoint mess Copilot can surface to anyone who asks nicely. The number is usually worse than anyone admits in the deployment meeting.
Continue ReadingThe release note for 27A5252f says almost nothing. The SDK underneath it quietly moves passkey upgrades, credential exchange, and Platform SSO from “nice to have” to “build against this or your submissions stop.” Here’s what to wire up now.
Continue ReadingThe only thing that changed on CVE-2026-65787 is an acknowledgement line — no new patch, no new binaries. But Desktop Window Manager elevation bugs have a nasty exploitation track record, so it’s worth checking you actually shipped the fix.
Continue ReadingA front-of-room display and a touch board that echo each other because they joined the same meeting as two separate participants is a familiar mess. Microsoft is fixing it for Android — but not until January 2027, and the licensing bill lands sooner than the feature.
Continue Reading