Defender for Cloud just closed the serverless container security gap with agentless scanning for Azure Container Apps. Three things it finally sees, and one critical capability it probably doesn’t include.
Continue Reading
Apple’s longtime App Store overseer is stepping back, but the company hasn’t named who inherits the rulebook that governs developer policy, enterprise distribution, and regulatory fights.
Continue Reading
Late betas sometimes land final Passkeys or Platform SSO changes mid-migration. I diffed beta 8’s identity surface so you know whether to care — and how to check the next one yourself.
Continue ReadingProject Zero published a complete zero-click exploit chain that took Pixel 10 devices from idle to root through a Dolby media component, patched eight months ago. The immediate job isn’t understanding the bug—it’s auditing every Android device in your fleet.
Continue Reading
Microsoft publishes new Graph permissions without advance notice, and your consent policies make decisions about them before you do. Here’s the PowerShell automation that catches new permissions the week they appear.
Continue Reading
Microsoft has shipped refresh-token transfer to general availability for Entra External ID, letting Apple Watch companion apps inherit their iPhone app’s session instead of demanding a second sign-in on a device with no keyboard.
Continue Reading
Microsoft’s new Multicloud Interconnect solves the multi-vendor SLA problem for Azure-to-AWS traffic. It doesn’t solve the egress bill, the split control plane, or the preview uncertainty that actually sink multi-cloud budgets.
Continue Reading
One LLM with tool access has one door you can guard. A fleet of agents has a corridor of connecting doors, and everyone got the same master key.
Continue Reading
The new campaign doesn’t exploit a vulnerability—it found a more respectable-looking room to commit the same crime. Here’s how TerminalFix uses Windows Terminal’s legitimacy to bypass user suspicion, and the one detection pattern that catches it before the payload runs.
Continue Reading
The browser fallback that many M365 admins rely on for interactive Graph sessions is being retired in favor of Windows Account Manager broker authentication. If your scripts assume a browser prompt, or you run Graph PowerShell on non-domain-joined machines or Linux, you need to test now.
Continue Reading