4 min read
Auth0’s Detection Catalog Ships the Queries and Leaves You the Hard Part
Auth0's open-source detection catalog provides pre-built threat queries for SOC teams. The rules are useful, but only after you build the log…
Mo Wasay
7 min read
Three Things That Broke When an Admin Ran Priority Cleanup on Held Data
A GDPR ticket was closed in forty minutes. Four weeks later, outside counsel asked for files that should have been preserved. Priority…
6 min read
The Management API key in your .env is dead. Scoped agent tokens won.
Auth0's new MCP server lets Claude Code call your Management API with scoped, short-lived tokens instead of static secrets. Here's how to…
4 min read
A Password in a Git Repo Deleted Someone’s Production Subscription
The attackers in the JADEPUFFER campaign didn't exploit a vulnerability—they used valid service principal credentials, probably leaked in a repository, to delete…
7 min read
iPhone 18 Pro Max on AT&T Stuck on SOS—Hardware Swap Only
A small number of iPhone 18 Pro Max devices on AT&T have permanently lost cellular service, and Apple says there's no software…
3 min read
Your Agent Says the Row Is Written. Did You Check?
The ticket said the refund was issued. The agent's transcript agreed: "Done — I've credited the customer $240 and logged it to…
4 min read
CVE-2026-66804: Fifteen Researchers Found What Microsoft’s Dark Elevator Patch Missed
Microsoft patched the Dark Elevator privilege escalation, but the fix addressed only one lookup path—not the underlying COM trust model. Now CVE-2026-66804…
6 min read
The Flat Exchange Network Is Dead. CVE-2026-96940 Just Signed the Certificate
The intern's mailbox, that 2019 scanner account, the contractor who left—every enabled credential that can reach your Exchange server is now one…
7 min read
The Three Scripts I Found Injecting Themselves Into Our Entra Sign-In Page
When I went looking for scripts that might break when Microsoft hardens Entra's sign-in page, I started in the wrong place. The…
7 min read
Phishing-Resistant Auth Beats Detection in Okta Hotelier Attacks, But Only One Ships Today
When attackers specifically target hospitality Okta accounts with adversary-in-the-middle phishing, you face a strategic choice: the control that actually prevents credential theft,…