6 min read
Your TestFlight Pipeline Runs on One P-256 Key. The Aug 25 Update Is a Good Excuse to Rotate It.
A quiet TestFlight point release lands the same week iOS 27 betas start flowing through it — and it's a reminder that…
Cybersecurity
5 min read
OpenAI Just Cut Off Cursor — and It Barely Matters
OpenAI is winding down the contract that supplies GPT models to Cursor after Elon Musk's SpaceX acquired the coding startup. The retaliation…
OpenAI Just Cut Off Cursor — and It Barely Matters6 min read
Microsoft Quietly Re-Touched a winget Privilege-Escalation Bug — Here’s What CVE-2026-68821 Actually Means for You
Microsoft's latest update to CVE-2026-68821 is a documentation-only change, not a new patch — but it's a good excuse to confirm your…
Microsoft Quietly Re-Touched a winget Privilege-Escalation Bug — Here’s What CVE-2026-68821 Actually Means for You8 min read
DoD Tenants Are Losing App Permission Policies — Here’s the App-Centric Migration You Can’t Ignore
App-centric management finally lands in the DoD cloud in October 2026, and it quietly retires the app permission policy model your governance…
DoD Tenants Are Losing App Permission Policies — Here’s the App-Centric Migration You Can’t Ignore6 min read
A Two-Line OneNote Changelog Is Really a Notes.ReadWrite.All Audit You’ve Been Skipping
Microsoft quietly shipped getNotebookFromWebUrl to Graph v1.0. The method is trivial. The permission it rides on — Notes.ReadWrite.All granted to some forgotten…
A Two-Line OneNote Changelog Is Really a Notes.ReadWrite.All Audit You’ve Been Skipping7 min read
Every Third-Party App in Your Tenant Is About to Grow an Agent. Audit the Consent Grants First.
Teams Admin Center will soon let admins one-click enable agents for apps you already own. Behind that button sits a pile of…
Every Third-Party App in Your Tenant Is About to Grow an Agent. Audit the Consent Grants First.8 min read
Your Copilot Has Read the Salary Sheet. Purview DSPM for AI Just Put It on a Dashboard.
Microsoft flipped on AI data discovery by default, and the first thing it does is show you exactly how much of your…
Your Copilot Has Read the Salary Sheet. Purview DSPM for AI Just Put It on a Dashboard.8 min read
Face Check Is GA: The Help-Desk Reset Scam Just Got a Biometric Wall
The phone call that started nearly every major breach of the last three years — "hi, it's me, I'm locked out, can…
Face Check Is GA: The Help-Desk Reset Scam Just Got a Biometric Wall7 min read
Xcode 27 beta 6 ships a “bug fixes” note and an identity SDK you can’t ignore past next spring
The release note for 27A5252f says almost nothing. The SDK underneath it quietly moves passkey upgrades, credential exchange, and Platform SSO from…
Xcode 27 beta 6 ships a “bug fixes” note and an identity SDK you can’t ignore past next spring6 min read
Microsoft Just Re-Credited a DWM Privilege Bug. Here’s Why That Non-Event Still Matters.
The only thing that changed on CVE-2026-65787 is an acknowledgement line — no new patch, no new binaries. But Desktop Window Manager…
Microsoft Just Re-Credited a DWM Privilege Bug. Here’s Why That Non-Event Still Matters.