Your AI models are moving to factory floors, retail edge devices, and sovereign clouds you can’t touch. Before you release model weights or credentials to hardware you don’t control, you need cryptographic proof from a TPM that the system is what it claims to be.
Continue Reading
A BASF subsidiary alleges Face ID infringes its depth-sensing patents and wants damages plus an injunction. Your LocalAuthentication code doesn’t change today, but this is a reminder to audit your biometric fallback paths.
Continue Reading
In early 2026, Dario Amodei warned the industry about investing too fast. Eleven months later, Anthropic has reportedly signed $517 billion in compute deals.
Continue Reading
If SSH on your MikroTik was reachable before you patched the authentication bypass, the attackers who got in likely created user accounts that will survive the upgrade. Here’s how to hunt for them.
Continue Reading
There’s a hybrid Exchange server somewhere in your org that’s been quietly relaying mail for years. This week, if it’s not on the October 2025 baseline, Microsoft starts throttling it—and throttling becomes blocking.
Continue Reading
Apple identity federation is now generally available in Entra External ID. Here’s the name-claim gotcha that cost me a week in production.
Continue Reading
IP address management is now GA in Azure sovereign clouds. For federal agencies and regulated workloads, that means one fewer third-party appliance to accredit inside the boundary.
Continue Reading
Three commands prove Beta 6 added no identity APIs—but the real risk this late in the cycle isn’t in the headers. It’s in the behavior changes under a frozen surface.
Continue Reading
There’s always one router nobody remembered to lock down—the site router installed by a contractor in 2019, still humming, still reachable from the internet on port 22. That’s the box being hijacked right now through a pre-authentication SSH bypass in MikroTik RouterOS.
Continue Reading
For fifteen years, you didn’t handle the password—you redirected to Microsoft and got back a token. Native Authentication for Entra External ID changes that: your SPA now collects credentials and drives sign-in through API calls.
Continue Reading