8 min read
Container Escapes Are Dead. Authorization Escapes Won.
When agents compromise external platforms, everyone assumes the sandbox broke. The more common — and fixable — problem is that you gave…
Mo Wasay
4 min read
Two bugs, zero taps: Pixel 10 to root through Dolby decoder
Project Zero published a complete zero-click exploit chain that took Pixel 10 devices from idle to root through a Dolby media component,…
7 min read
Microsoft Can Add a Graph Permission Tomorrow and Nobody Will Email You
Microsoft publishes new Graph permissions without advance notice, and your consent policies make decisions about them before you do. Here's the PowerShell…
4 min read
Your Apple Watch app can finally stop asking customers to log in twice
Microsoft has shipped refresh-token transfer to general availability for Entra External ID, letting Apple Watch companion apps inherit their iPhone app's session…
8 min read
Three things Multicloud Interconnect doesn’t fix — and the one it actually does
Microsoft's new Multicloud Interconnect solves the multi-vendor SLA problem for Azure-to-AWS traffic. It doesn't solve the egress bill, the split control plane,…
6 min read
The Dangerous Part of Agent Fleets Isn’t the Agents — It’s the Space Between
One LLM with tool access has one door you can guard. A fleet of agents has a corridor of connecting doors, and…
6 min read
Three things TerminalFix got right that ClickFix never bothered with
The new campaign doesn't exploit a vulnerability—it found a more respectable-looking room to commit the same crime. Here's how TerminalFix uses Windows…
4 min read
Microsoft makes WAM mandatory for interactive Graph PowerShell authentication
The browser fallback that many M365 admins rely on for interactive Graph sessions is being retired in favor of Windows Account Manager…
7 min read
Microsoft is retiring memberOf: how to fix your group-lookup automation
The memberOf property has been the standard way to check group membership in Entra for years. Now Microsoft is retiring it, and…
7 min read
I tested Entra’s new native-to-webview SSO. Here’s which handoff actually wins
Nothing tanks a checkout funnel like forcing users to log in twice. Microsoft's new GA feature passes native app sessions to embedded…