Microsoft’s October security update breaks records, but the bigger story isn’t the number of vulnerabilities. It’s what happens when attackers, AI-powered discovery and enterprise patch management move at different speeds. Microsoft’s October 2026 Patch Tuesday was historic — and not entirely for the reasons the company might have hoped. The release addressed more than 1,400…
Category: CyberSecurity
Extending Zero Trust to AI agents: securing the next enterprise identity
Enterprise AI is rapidly evolving beyond copilots and chatbots. Today’s AI agents can authenticate to enterprise services, invoke APIs, retrieve sensitive business data, execute workflows, and even coordinate with other agents without continuous human interaction. That fundamentally changes the enterprise security model. Traditional governance frameworks were designed around users, devices, applications, and infrastructure. AI agents…
Patch your Domain Controllers now
Because CVE-2026-41089 is the kind of vulnerability that turns “later” into ransomware Hello. Every few years, Active Directory gets reminded that some components are simply too important to fail quietly. Netlogon is one of them. And CVE-2026-41089 is exactly the type of vulnerability security teams hate seeing: remote code executionno credentials requiredno user interactionSYSTEM privilegesactive…
YellowKey is not “BitLocker broken”
It is something far more uncomfortable: the recovery environment became part of the attack surface Hello. For years, BitLocker has been treated almost like a solved problem. Enable TPM.Encrypt the drive.Sleep peacefully. And to be fair, the encryption itself is still solid. But YellowKey changes the conversation in a much uglier way. Because CVE-2026-45585 does…
Kerberos Hardening Guide (2026 Edition)
From RC4 to AES — What Actually Changes and What You Must Fix Now 🔥 Why This Matters (No Marketing, Just Reality) Kerberos is quietly going through one of the most important security shifts in years:RC4 is dying. AES is becoming the default. This is not just a “nice security improvement”. This will: break legacy…
Sentinel + GitHub + IP allow list = everything works… until u turn security on
There is a very specific type of failure that shows up in Microsoft Sentinel setups.No errors. No alerts. No logs screaming at u. Just… nothing works. You connect the GitHub app.Authorisation succeeds.UI looks fine. And your repositories simply do not appear. Then u disable the IP allow list in GitHub… and suddenly everything works. That…
Microsoft 365 Copilot Chat: Architectural Shift Toward a Unified AI Work Surface
Microsoft 365 Copilot Chat is no longer just a conversational wrapper around generative AI. It is becoming a structured intelligence layer that sits across the Microsoft 365 data plane, orchestrating context from multiple document types, identities and workloads. What makes this evolution technically interesting is not the interface. It is how context is constructed, secured…
10 Entra ID Configurations That Should Not Be Left in Their Default State
Every Azure architect eventually realises the tenant works, but it is not engineered. Microsoft gives you the building blocks. It is your job to turn them into an identity architecture. Here are the configurations that should not remain in their default state. 1. Replace Security Defaults with Conditional Access Security Defaults are a starting baseline….
Windows 11 Update Breaks Offline Login — What That Really Means
If you heard about a recent Windows 11 update causing “Can’t sign in because your device needs an internet connection” errors — you’re not imagining things. Multiple reports, official feedback and user reproduction steps confirm that after installing the latest cumulative update, some devices refuse to let users sign in if they cannot reach Microsoft’s…
Security That Delivers ROI
When cybersecurity starts generating business value Hello everyone. As usually Alex here, so today I would like to talk about something quite interesting. Security is usually treated as an unavoidable expense. Organisations purchase protection tools, build SOC teams, implement policies and, if we are being honest, mostly hope that nothing catastrophic happens inside the infrastructure….