AI Agent Cyber Attacks: What the Unit 42 Case Changes
AI agent cyber attacks compressed an enterprise intrusion into under 10 hours. Rebuild Entra, GitHub and Key Vault containment so every step fires at once.
Read article →
Latest
Security
Secure Boot Certificates and Memory Integrity by Default in Windows
Windows secure boot certificate update 2026 lands the same month Memory Integrity turns on by default — how to inventory, stage, and control both.
EWS Shutdown, Updated: What Microsoft Changed on 4 September and Your Last Three Weeks Before October
EWS disablement October 2026 got a rewritten parity-gap roadmap and a second usage tool on 4 September — the exact diff and a dated three-week plan.
Read article →
Build the Microsoft 365 Outage Runbook You Didn’t Have
A three-day Microsoft 365 authentication outage exposed break-glass gaps everywhere. Build the runbook that keeps admins working when Entra can't answer.
Read article →
LiteLLM, RAGFlow, Kestra: Your AI Gateway Is a Control-Plane Target
AI gateway security after Microsoft's August findings: find exposed LiteLLM, RAGFlow and Kestra hosts in Azure, isolate them, rotate keys, detect abuse.
Read article →
Emergency Patches Outside Microsoft: Adobe Commerce StyleSmuggler, N-able N-central, and PEEP
Critical patches for Adobe Commerce StyleSmuggler, N-able N-central Hotfix 4, and PEEP Chromium backdoor. Verify exposure and patch order.
Read article →
Retirement Debt Comes Due: Azure VPN Client for Linux, AVD Classic, Graph Toolkit and Project Online
Four Microsoft services retire in August-September 2026. Find which affects your infrastructure, how to detect them, and your migration timeline.
Read article →
Teams Helpdesk Impersonation: When the Attack Rides a Trusted Workflow
Teams helpdesk impersonation turns one approved remote session into domain access. The kill chain, KQL hunting queries, and the settings that stop it.
Read article →
September 2026 Patch Tuesday: 966 Fixes, Two Zero-Days to Triage First
September 2026 patch tuesday shipped 966 fixes and two exploited zero-days — the triage order, expedite paths, and KQL to run while you deploy.
Read article →
EWS Retirement: Your Exchange Online Graph Migration Plan
EWS is disabled by default on 1 October 2026 and permanently retired on 1 April 2027. Find your callers, set the allowlist, and plan the Graph move.
Read article →