6 min read
I Diffed iOS 27.2 RC. The Release Notes Weren’t the Story.
Apple's iOS 27.2 RC release notes won't tell you if Sign in with Apple token validation breaks or if a LAContext change…
Azure · Cybersecurity · AI
Enterprise IT, rewritten in real time.
Field notes on Azure, identity, and the AI shift changing how enterprise IT actually runs — from someone shipping the fixes, not just the takes.
The latest
Recent writing, newest first.
4 min read
Your Insider Threat Model Now Has a Folder Called Saudi Gov Docs
A former OpenAI engineer allegedly worked for a foreign government. Whether the charges stick or not, the scenario is no longer hypothetical—and…
3 min read
Ransomware Gangs Are Walking Through PAN-OS CVE-2026-0257—Patch Tonight
Unit 42 confirmed October 19 that two ransomware operations are using a PAN-OS vulnerability for initial access to enterprise networks. If your…
7 min read
Microsoft Retires Search-UnifiedAuditLog in 12 Months—Here’s What Broke When I Migrated
Every compliance audit, security incident, and insider threat investigation uses one PowerShell cmdlet to pull M365's unified audit log. That cmdlet goes…
4 min read
Stolen Passwords Are Boring. Stolen Consent Just Owned 173 Tenants at Once.
The ConnectWise breach didn't steal a password—it weaponized 173 consent grants that customer tenants had already approved. One stolen app credential became…
6 min read
I Gave an Agent a Service Principal. Token Lifetime Is the Revocation Problem.
Microsoft's Project Perception promises to monitor AI agents at machine speed. But when I rotated credentials mid-week, the already-issued token kept working…