4 min read
AI Writes 75% of DeepMind’s Code and Its Research Isn’t Moving Any Faster
AI writes more than three-quarters of the production code at DeepMind. According to internal metrics shared by engineer Haydn Belfield, it hasn't…
Mo Wasay
6 min read
Cisco Email Gateway Lets Unauthenticated Senders Write Files to the OS—Actively Exploited
An email gateway's entire job is to accept input from people it has never met—that's the design, not a flaw. Now an…
8 min read
File-Level Archiving Is GA and Purview Won’t Tell You What It Moved
Retention labels with an archive action can silently move SharePoint files to restricted storage. The compliance portal has no native report to…
8 min read
Auth0 TanStack Start SDK Protects Routes With One Middleware, Zero React Server Components
TanStack Start doesn't have React Server Components, despite what Auth0's marketing suggests. That makes the authentication story simpler, not harder—if you know…
5 min read
Microsoft Open-Sourced Its Server HSM Chip. Your Key Rotation Schedule Does Not Change
Azure Integrated HSM—the cryptographic module in Microsoft's server fleet—just became inspectable hardware. For most practitioners, the transparency matters more than the tech,…
6 min read
iOS 27.2 Beta 3 Ships With Empty Release Notes. Reading Them Is Dead; Diffing the Device Won.
Apple's release notes won't tell you what changed in build 24B5099f. Here's the seven-step diff process identity and MDM teams should run…
7 min read
Three Things That Broke When Anthropic Pulled the Internet From Its Own Evals
On October 9th, Anthropic disclosed that it has removed live internet access from all internal evaluations because it cannot reliably control unintended…
4 min read
Did a Workflow You Trusted Just Exfiltrate Your Secrets?
Attackers compromised maintainer accounts on 340+ repositories and inserted malicious GitHub Actions workflows that steal secrets during CI runs. If your pipeline…
6 min read
One Toggle, Five Years Late: Send From Alias Finally Goes GA
Microsoft's send-from-alias feature sat in preview long enough that thousands of shared mailboxes exist only to work around it. Here's what general…
3 min read
I Went Hunting for TrustSink in My Tenant—Four Old Attacks, New Name
When a new attack name drops, I audit my tenant first and the hype second. TrustSink turned out to be four well-known…