4 min read
Three Ways App A Calls App B Badly—and Why ID-JAG Kills Two of Them
When your frontend needs to call a backend microservice on behalf of a user, the usual OAuth patterns either leak credentials, train…
Azure · Cybersecurity · AI
Enterprise IT, rewritten in real time.
Field notes on Azure, identity, and the AI shift changing how enterprise IT actually runs — from someone shipping the fixes, not just the takes.
The latest
Recent writing, newest first.
6 min read
All-or-Nothing Peering Is Dead: Azure Drops Routes Per Subnet
Azure's new route-table flag suppresses peering routes on chosen subnets. The routing layer can finally enforce segmentation—but it's a scalpel, not a…
6 min read
I Diffed iOS 27.2 RC. The Release Notes Weren’t the Story.
Apple's iOS 27.2 RC release notes won't tell you if Sign in with Apple token validation breaks or if a LAContext change…
4 min read
Your Insider Threat Model Now Has a Folder Called Saudi Gov Docs
A former OpenAI engineer allegedly worked for a foreign government. Whether the charges stick or not, the scenario is no longer hypothetical—and…
3 min read
Ransomware Gangs Are Walking Through PAN-OS CVE-2026-0257—Patch Tonight
Unit 42 confirmed October 19 that two ransomware operations are using a PAN-OS vulnerability for initial access to enterprise networks. If your…
7 min read
Microsoft Retires Search-UnifiedAuditLog in 12 Months—Here’s What Broke When I Migrated
Every compliance audit, security incident, and insider threat investigation uses one PowerShell cmdlet to pull M365's unified audit log. That cmdlet goes…