2 min read
The Import-Export API Reaches Group Mailbox Folders the Mail API Won’t Touch
Point Graph's /messages endpoint at a Microsoft 365 group and you'll get the Inbox. Sent Items, Drafts, and custom folders require the…
Mo Wasay
4 min read
Three things to check before you trust Teams’ new impersonation warning
Display-name spoofing has let attackers join Teams meetings as fake executives for years. Microsoft's new Impersonation Protection flags mismatched names against Entra…
5 min read
I gave an ETL account bulkadmin for a week — it’s not the least-privilege win everyone’s selling
SQL Server 2025 CU9 and 2022 CU27 finally bring bulkadmin to Linux, but the server-wide filesystem access it grants isn't the clean…
4 min read
Apple Ships XProtect Updates With No Release Notes. The Diff Is the Changelog.
When XProtect 5366 landed October 6th, I went hunting for the threat it addressed. Twenty minutes later I learned Apple ships these…
7 min read
OpenAI Dropped 722 AI-Generated Math Manuscripts on GitHub You Can Actually Check
The interesting number isn't 722. It's zero—as in the number of these proofs you're being asked to take on faith.
8 min read
The GET Request That Reads Your Database Password: Atlassian CVE-2026-21589
An unauthenticated attacker who can reach your Confluence login page can read the file that stores your database password—no credentials, no phishing,…
6 min read
Three Things That Broke When an Archive Mailbox Hit 1.5 TB — and Why That Wall Is Gone
An archive mailbox that hit 1.5 TB became inoperative—retention failed silently, compliance holds broke, and primary mailboxes bloated. That ceiling just disappeared.
4 min read
Azure Stack Hub App Service: Install Window Closed, 2029 Is the Decoy
Microsoft says existing deployments are supported through 2029, but that means a frozen runtime aging against your audit schedule. The real deadlines…
4 min read
One Poisoned MCP Server Can Quietly Issue Orders to Every Agent Downstream
Your agent transferred data nobody asked for, citing an instruction nobody wrote. The command came from a tool result it read as…
4 min read
Microsoft and Meta Just Slashed Their Claude Budgets. Here’s the Checklist for Engineers.
Microsoft cut per-employee Claude spending by 90%. Meta halved its seat count. When your AI vendor becomes your customer's competitor, here's how…