Enterprise IT, rewritten in real time.

Field notes on Azure, identity, security and the AI shift, from someone shipping the fixes, not just the takes.

The latest

You Deployed a Whole NVA to Drop One Subnet. Route Maps Just Made That Embarrassing. Filtering one subnet from your hybrid BGP routes used to mean deploying a whole VM, licensing it, and keeping it patched. Route maps on Azure Route Server just made that entire appliance…
Anthropic Just Took a 38% Haircut to Go Public. Should Your Roadmap Flinch? Anthropic is going public at up to $750 billion less than it hoped. That's not a crisis for your Claude deployment, but it is a signal about foundation-model unit economics that should…
I Went Hunting for .claude Files on GitHub. The Passwords Were Sitting in Plaintext. Claude Code's 'don't ask again' feature saves complete commands, including passwords typed inline, to a local config file. 1,122 public GitHub repos were found leaking those files with credentials in plaintext.
I Read the Exchange Admin API Announcement So You Don’t Have To Panic Microsoft's new Exchange Admin API sounds like a big deal. It's actually a narrow migration tool for EWS developers, and if you're not one of them, you can probably keep scrolling.
If an Attacker Owns Your MSP’s Tenant, How Far Can They Walk Into Yours? The attacker never touched your tenant's password, they walked in through the B2B or GDAP relationship you set up to let your MSP administer your directory.
Storm-3358 Now Runs an Autonomous AI Against Bank Identity Systems 24 Hours a Day Storm-3358 is using an AI agent framework to autonomously probe bank identity systems for credential leaks, OAuth misconfigurations, and MFA gaps, around the clock, for pennies. The attacks are ordinary; the economics…
Zero Kusto Queries: What WAF Insights Going GA Actually Changes at 2 a.m. A deploy goes bad at 2 a.m., checkout throws 403s, and you're hunting through Log Analytics for the WAF rule eating legitimate requests. Microsoft just shipped the dashboard that's supposed to delete…
Three Permission Mistakes That Let Multi-Tenant Apps Quietly Own Your Directory Application permissions where delegated would do, overly broad scopes, and no way to list what's already consented. Here's the five-step audit to find which external apps are sitting in your tenant right…
The PostgreSQL API Version in Your Bicep Is Already a Year Behind The compliance team wants WORM backups by Friday, and the new PostgreSQL API version 2026-10-01 can deliver them. But first you need to find which API version your Bicep is actually pinned…
81 Firefox Bugs, 948 Kernel Exploits, and the Number OpenAI Left Off the Slide OpenAI's GPT-6 Cyber found 81 Firefox bugs and wrote 948 kernel exploits. But the number that determines whether that's a breakthrough or a triage tax is the one they didn't put on…
I Sent a 300-Byte Password at a Key-Only Account. It Let Me In. A key-only SSH account should be immune to password guessing. On Alpine Linux, a 300-byte password bypasses authentication entirely, no key, no credential, just the right string length.
OneDrive Sync Finally Has a Command-Line Tool. It’s Called odcli. For years, the only supported way to check OneDrive sync status was to ask users to describe the color of a cloud in their system tray. Microsoft just shipped odcli, the official…
MFA Won the Human War. Your Service Principals Never Got the Memo. Human identities got Conditional Access, MFA, and risk scoring. Service principals got a 24-month client secret and zero monitoring. Count what's running in your tenant before someone else does.

Enterprise IT, rewritten in real time.

The latest

Topics