7 min read
Microsoft Can Add a Graph Permission Tomorrow and Nobody Will Email You
Microsoft publishes new Graph permissions without advance notice, and your consent policies make decisions about them before you do. Here's the PowerShell…
7 min read
Microsoft publishes new Graph permissions without advance notice, and your consent policies make decisions about them before you do. Here's the PowerShell…
Microsoft Can Add a Graph Permission Tomorrow and Nobody Will Email You
6 min read
The new campaign doesn't exploit a vulnerability—it found a more respectable-looking room to commit the same crime. Here's how TerminalFix uses Windows…
Three things TerminalFix got right that ClickFix never bothered with
7 min read
The memberOf property has been the standard way to check group membership in Entra for years. Now Microsoft is retiring it, and…
Microsoft is retiring memberOf: how to fix your group-lookup automation
7 min read
Nothing tanks a checkout funnel like forcing users to log in twice. Microsoft's new GA feature passes native app sessions to embedded…
I tested Entra’s new native-to-webview SSO. Here’s which handoff actually wins
4 min read
AKS pods can now authenticate to Azure Files SMB shares using federated identity credentials instead of cluster-wide managed identities or storage account…
Azure Files CSI driver adds workload identity for AKS SMB mounts6 min read
Microsoft's latest update to CVE-2026-68821 is a documentation-only change, not a new patch — but it's a good excuse to confirm your…
Microsoft Quietly Re-Touched a winget Privilege-Escalation Bug — Here’s What CVE-2026-68821 Actually Means for You8 min read
App-centric management finally lands in the DoD cloud in October 2026, and it quietly retires the app permission policy model your governance…
DoD Tenants Are Losing App Permission Policies — Here’s the App-Centric Migration You Can’t Ignore8 min read
Microsoft flipped on AI data discovery by default, and the first thing it does is show you exactly how much of your…
Your Copilot Has Read the Salary Sheet. Purview DSPM for AI Just Put It on a Dashboard.8 min read
The phone call that started nearly every major breach of the last three years — "hi, it's me, I'm locked out, can…
Face Check Is GA: The Help-Desk Reset Scam Just Got a Biometric Wall6 min read
The only thing that changed on CVE-2026-65787 is an acknowledgement line — no new patch, no new binaries. But Desktop Window Manager…
Microsoft Just Re-Credited a DWM Privilege Bug. Here’s Why That Non-Event Still Matters.