7 min read
Your MFA Held. The Service Principal Walked Right In.
Microsoft reports that Storm-0940 used agentic AI to turn a single vendor compromise into access across hundreds of M365 tenants—not by breaking…
Blog
8 min read
Cosmos DB Can Now Tell You Which Account Key You’re About to Break
Azure's Safe Key Rotation feature is now GA, and it does exactly one thing well: shows you when each Cosmos DB account…
9 min read
The Build Number Is 26A434. That’s the Only Name on This Release You Can Trust.
Apple calls it macOS 27.0.1. The URL still says Tahoe. The build number says 26A434. If you're deploying to a managed fleet,…
4 min read
Anthropic’s Safety Bill Turns on One Number, and It Isn’t 50
Everyone's arguing about whether 50 deaths is the right threshold. Meanwhile, the framework just took away regulators' ability to stop a model…
7 min read
Eight eMudhra CA Private Keys Compromised—Browsers Blocking Certificates, Check Your Chains Tonight
Eight eMudhra intermediate CA signing keys are in the wild, giving attackers the ability to issue valid TLS certificates for any domain.…
4 min read
Can You See What Your AI Agents Are Actually Doing in Your Tenant?
Microsoft just acknowledged that AI agents with tenant access are an insider-threat surface. Here's what Project Perception monitors, what it doesn't prevent,…
4 min read
Over-Provisioned Compliance Admins Are Dead. View-Only Device Management Won.
Purview DLP now offers a View-Only Device Management role that lets SOC analysts and compliance staff see device onboarding status without the…
4 min read
Three Ways App A Calls App B Badly—and Why ID-JAG Kills Two of Them
When your frontend needs to call a backend microservice on behalf of a user, the usual OAuth patterns either leak credentials, train…
6 min read
All-or-Nothing Peering Is Dead: Azure Drops Routes Per Subnet
Azure's new route-table flag suppresses peering routes on chosen subnets. The routing layer can finally enforce segmentation—but it's a scalpel, not a…
6 min read
I Diffed iOS 27.2 RC. The Release Notes Weren’t the Story.
Apple's iOS 27.2 RC release notes won't tell you if Sign in with Apple token validation breaks or if a LAContext change…