4 min read
Three things Azure Container Apps Sandboxes still won’t do for you
Microsoft's new GA feature offloads VM-grade isolation for untrusted code to a managed service. The gaps that remain — secrets, egress, and…
Azure
4 min read
Microsoft's new GA feature offloads VM-grade isolation for untrusted code to a managed service. The gaps that remain — secrets, egress, and…
Three things Azure Container Apps Sandboxes still won’t do for you
8 min read
Microsoft's new Flex Nodes preview inverts hybrid Kubernetes: your workers run on-prem, but the control plane—etcd, certs, upgrades, all the things that…
AKS Flex Nodes Kill the Snowflake Cluster Era
4 min read
The SDK didn't change, so your app still compiles—but that's a build-time promise, not a behavior promise. Here's why rollback isn't an…
Can You Roll Back Azure Sphere 26.09? No — and That’s the Whole Point
6 min read
Business units have been spinning up AI agents with nobody able to say no. Microsoft just shipped the first governance control—a tenant-wide…
The Demo Era for Foundry Agents Is Over. The Kill-Switch Era Just Began
8 min read
Microsoft deprecated the PowerShell modules your automation runs on. Here's how to migrate to Microsoft Graph SDK without turning it into a…
My AzureAD Scripts Stopped Working — Now What?
4 min read
The new site-scoped certificate model eliminates the Key Vault dependency for simple workloads, but the hard 3+3 limit means you'll hit the…
Azure Functions Flex Consumption Now Holds Six Certificates Per App
8 min read
Multiple threat groups used Claude to automate credential extraction from 1.8 million Android apps. The capability isn't new, but the cost just…
Attackers ran 1.8 million Android APKs through Claude to strip out hardcoded secrets
8 min read
Microsoft Graph has exactly one way to create a meeting programmatically, and it produces a private meeting every time. Here's the workaround…
The onboarding script made 40 meetings and none landed in a channel
3 min read
Azure Linux with OS Guard loses support on December 10, 2026. Any AKS node pool still running it after that date stops…
You Have 89 Days to Get OS Guard Off Your AKS Node Pools
8 min read
When someone DCSync's your directory at 2 a.m., three questions matter: what did they take, how far did they get, and how…
Microsoft Architect: Active Directory Is 10x Harder to Defend Than Entra ID