Azure · Cybersecurity · AI
Field notes on Azure, identity, and the AI shift changing how enterprise IT actually runs — from someone shipping the fixes, not just the takes.
Recent writing, newest first.
4 min read
Enterprise IT can now buy app subscriptions through the same volume purchasing workflow used for one-time licenses, ending the reimbursement-and-workaround era.
7 min read
When an agent logs in with your password, it gets all of your authority—not just the slice it needs. Major banks just…
6 min read
Two unauthenticated RCE bugs in PHP affect every version before today's emergency patches, and working exploits already exist. Here's why the 'mitigate…
4 min read
Microsoft's updated break-glass guidance requires two cloud-only Entra ID accounts excluded from Conditional Access—creating the exact security gap auditors flag. The checklist…
4 min read
Starting October 30, Microsoft stops delivering SMS and voice MFA codes itself—forcing every tenant still using telephony methods to configure a third-party…
6 min read
One leaked secret, forty compromised agents. That's the reality of shared service account auth—and Auth0's new CIMD support finally gives you a…