6 min read
Your Phishing-Resistant Passkeys Fold the Moment Malware Lands on the Device
Passkeys still stop remote phishing. Malware on the device defeats them easily—and most MFA rollouts forgot to require device compliance in Conditional…
Azure · Cybersecurity · AI
Enterprise IT, rewritten in real time.
Field notes on Azure, identity, and the AI shift changing how enterprise IT actually runs — from someone shipping the fixes, not just the takes.
The latest
Recent writing, newest first.
7 min read
Your MFA Held. The Service Principal Walked Right In.
Microsoft reports that Storm-0940 used agentic AI to turn a single vendor compromise into access across hundreds of M365 tenants—not by breaking…
8 min read
Cosmos DB Can Now Tell You Which Account Key You’re About to Break
Azure's Safe Key Rotation feature is now GA, and it does exactly one thing well: shows you when each Cosmos DB account…
9 min read
The Build Number Is 26A434. That’s the Only Name on This Release You Can Trust.
Apple calls it macOS 27.0.1. The URL still says Tahoe. The build number says 26A434. If you're deploying to a managed fleet,…
4 min read
Anthropic’s Safety Bill Turns on One Number, and It Isn’t 50
Everyone's arguing about whether 50 deaths is the right threshold. Meanwhile, the framework just took away regulators' ability to stop a model…
7 min read
Eight eMudhra CA Private Keys Compromised—Browsers Blocking Certificates, Check Your Chains Tonight
Eight eMudhra intermediate CA signing keys are in the wild, giving attackers the ability to issue valid TLS certificates for any domain.…