3 min read
I Went Hunting for TrustSink in My Tenant—Four Old Attacks, New Name
When a new attack name drops, I audit my tenant first and the hype second. TrustSink turned out to be four well-known…
Mo Wasay
9 min read
Why Did Every Pod on That Arc Cluster Stop Getting Its Secrets?
Microsoft is retiring the Secrets Provider extension for Arc Kubernetes clusters in October 2027. The replacement isn't a drop-in swap — it's…
7 min read
The BI Ticket Is Dead. The Warehouse Credential Is the New Attack Surface
Anthropic's Dashboards beta collapses the two-week BI ticket into a sentence. It also collapses your access review into a credential you hand…
4 min read
“I Archived That in 2018″—So Why Is Copilot Quoting It Back to Me?
Archive mailboxes aren't cold storage—Microsoft Search indexes them just like primary mailboxes, which means Copilot has full access to every email your…
5 min read
AKS Now Defaults New Clusters to StandardV2 NAT Gateway—Check the Cost
Microsoft changed the default NAT Gateway SKU for new AKS clusters, and the new one bills per gateway-hour plus per gigabyte of…
7 min read
App Store Connect API 4.5.1 Touches Nothing Your Identity Stack Depends On
No change to Sign in with Apple's token endpoints, App Attest, or signing requirements. But the reflex to skim and assume it…
4 min read
Domain Validation Is Dead. Certificate Transparency Won.
Attackers took over three country-code domain registries and issued valid HTTPS certificates for Google domains. Every validation method the CAs checked passed—because…
2 min read
The Import-Export API Reaches Group Mailbox Folders the Mail API Won’t Touch
Point Graph's /messages endpoint at a Microsoft 365 group and you'll get the Inbox. Sent Items, Drafts, and custom folders require the…
4 min read
Three things to check before you trust Teams’ new impersonation warning
Display-name spoofing has let attackers join Teams meetings as fake executives for years. Microsoft's new Impersonation Protection flags mismatched names against Entra…
5 min read
I gave an ETL account bulkadmin for a week — it’s not the least-privilege win everyone’s selling
SQL Server 2025 CU9 and 2022 CU27 finally bring bulkadmin to Linux, but the server-wide filesystem access it grants isn't the clean…