4 min read
Microsoft and Meta Just Slashed Their Claude Budgets. Here’s the Checklist for Engineers.
Microsoft cut per-employee Claude spending by 90%. Meta halved its seat count. When your AI vendor becomes your customer's competitor, here's how…
Blog
4 min read
One Poisoned MCP Server Can Quietly Issue Orders to Every Agent Downstream
Your agent transferred data nobody asked for, citing an instruction nobody wrote. The command came from a tool result it read as…
4 min read
Auth0’s Detection Catalog Ships the Queries and Leaves You the Hard Part
Auth0's open-source detection catalog provides pre-built threat queries for SOC teams. The rules are useful, but only after you build the log…
7 min read
Three Things That Broke When an Admin Ran Priority Cleanup on Held Data
A GDPR ticket was closed in forty minutes. Four weeks later, outside counsel asked for files that should have been preserved. Priority…
6 min read
The Management API key in your .env is dead. Scoped agent tokens won.
Auth0's new MCP server lets Claude Code call your Management API with scoped, short-lived tokens instead of static secrets. Here's how to…
4 min read
A Password in a Git Repo Deleted Someone’s Production Subscription
The attackers in the JADEPUFFER campaign didn't exploit a vulnerability—they used valid service principal credentials, probably leaked in a repository, to delete…
7 min read
iPhone 18 Pro Max on AT&T Stuck on SOS—Hardware Swap Only
A small number of iPhone 18 Pro Max devices on AT&T have permanently lost cellular service, and Apple says there's no software…
3 min read
Your Agent Says the Row Is Written. Did You Check?
The ticket said the refund was issued. The agent's transcript agreed: "Done — I've credited the customer $240 and logged it to…
4 min read
CVE-2026-66804: Fifteen Researchers Found What Microsoft’s Dark Elevator Patch Missed
Microsoft patched the Dark Elevator privilege escalation, but the fix addressed only one lookup path—not the underlying COM trust model. Now CVE-2026-66804…
6 min read
The Flat Exchange Network Is Dead. CVE-2026-96940 Just Signed the Certificate
The intern's mailbox, that 2019 scanner account, the contractor who left—every enabled credential that can reach your Exchange server is now one…