Enterprise AI is rapidly evolving beyond copilots and chatbots. Today’s AI agents can authenticate to enterprise services, invoke APIs, retrieve sensitive business data, execute workflows, and even coordinate with other agents without continuous human interaction. That fundamentally changes the enterprise security model. Traditional governance frameworks were designed around users, devices, applications, and infrastructure. AI agents…
Category: Cloud
Patch your Domain Controllers now
Because CVE-2026-41089 is the kind of vulnerability that turns “later” into ransomware Hello. Every few years, Active Directory gets reminded that some components are simply too important to fail quietly. Netlogon is one of them. And CVE-2026-41089 is exactly the type of vulnerability security teams hate seeing: remote code executionno credentials requiredno user interactionSYSTEM privilegesactive…
YellowKey is not “BitLocker broken”
It is something far more uncomfortable: the recovery environment became part of the attack surface Hello. For years, BitLocker has been treated almost like a solved problem. Enable TPM.Encrypt the drive.Sleep peacefully. And to be fair, the encryption itself is still solid. But YellowKey changes the conversation in a much uglier way. Because CVE-2026-45585 does…
Azure is a hierarchy-driven control plane
firstly if u have no time: TL;DR Azure = hierarchical control planeTenant = identityManagement Groups = governanceSubscriptions = isolationResource Groups = deployment scopeResources = execution Policy + RBAC + Locks = real control Azure is not flat. It is a layered model where authorization, policy and scope inheritance define behaviour. At a technical level, everything…
Kerberos Hardening Guide (2026 Edition)
From RC4 to AES — What Actually Changes and What You Must Fix Now 🔥 Why This Matters (No Marketing, Just Reality) Kerberos is quietly going through one of the most important security shifts in years:RC4 is dying. AES is becoming the default. This is not just a “nice security improvement”. This will: break legacy…
Microsoft 365 Copilot Chat: Architectural Shift Toward a Unified AI Work Surface
Microsoft 365 Copilot Chat is no longer just a conversational wrapper around generative AI. It is becoming a structured intelligence layer that sits across the Microsoft 365 data plane, orchestrating context from multiple document types, identities and workloads. What makes this evolution technically interesting is not the interface. It is how context is constructed, secured…
Security That Delivers ROI
When cybersecurity starts generating business value Hello everyone. As usually Alex here, so today I would like to talk about something quite interesting. Security is usually treated as an unavoidable expense. Organisations purchase protection tools, build SOC teams, implement policies and, if we are being honest, mostly hope that nothing catastrophic happens inside the infrastructure….
Kerberos Is Moving to AES by Default: Are Your Domains Ready?
Hi everyone, Alex here again. Today we’re talking about a change in Active Directory authentication that may look small on paper but could have very real operational consequences if administrators are not prepared. In just over a month, the April Windows update will shift Kerberos service tickets to AES encryption by default, moving domains further…
Secure Boot Certificate Expiration in 2026: What Windows Administrators Need to Know
Hi everyone, Alex here again. Today we’re going to talk about a piece of Windows infrastructure that most people never think about — until it suddenly matters. I’m talking about Secure Boot and the upcoming expiration of the Microsoft 2011 certificate in October 2026. Nothing is going to explode overnight, but if you manage Windows…
Architecture Over Illusion: How I Secure Azure Environments in the Real World
When people say “we secure Azure”, they usually mean a collection of enabled settings. MFA is on. Defender is enabled. Policies are applied. Secure Score looks respectable. Formally, everything appears correct. In practice, that may not be the case. The cloud does not forgive illusions. It scales faster than teams can fully grasp the consequences…