OpenTofu vs Terraform: Choosing After the IBM Acquisition
OpenTofu vs Terraform compared on licensing, feature drift, registry trust and migration cost, with a decision matrix for standardising your IaC.
Read article →Practical guides for IT pros running Microsoft 365 and Azure
Step-by-step articles for the administrators, cloud and platform engineers, and security teams who operate the platform. Each one leads with a summary, then gets to the configuration.
Latest
Security
AiTM Token Theft: Detect Replay, Enforce Auth Strengths
AiTM token theft defeats MFA by replaying stolen session cookies. Hunt replay in Entra sign-in logs and enforce phishing-resistant auth strengths.
SharePoint OTP Retirement: Move Guests to Entra B2B
SharePoint OTP retirement is here: find external recipients with no Entra B2B guest account, restore their access, and govern guests with PowerShell.
Read article →
CSP Break-Glass Accounts and Passkeys for Customer Tenants
CSP break-glass accounts done right: phishing-resistant passkeys for technicians, GDAP role tiers, emergency access custody, and drift checks at scale.
Read article →
Passkeys and Break Glass Accounts in One Entra Tenant
Entra emergency access accounts and passkeys in one tenant: FIDO2 keys for break glass, Conditional Access exclusions, sign-in alerts and quarterly drills.
Read article →
Windows Server 2016 End of Support: Upgrade, Arc or ESU?
Windows Server 2016 end of support lands January 2027. Compare in-place upgrade, Azure Arc ESU and migration with a cost and risk matrix.
Read article →
ASCII Smuggling: Invisible Unicode Is Slipping Past Your Phishing Filters
ASCII smuggling phishing hides invisible Unicode inside lure words to dodge keyword filters — how it works, and how to normalize before you match.
Read article →
Intune Remote Help Governance: Quick Assist, RMM and WinRM
Intune Remote Help governance after the Teams helpdesk campaign — RBAC, Conditional Access, and WinRM hardening that close the remote-access gap.
Read article →
Secure Boot Certificates and Memory Integrity by Default in Windows
Windows secure boot certificate update 2026 lands the same month Memory Integrity turns on by default — how to inventory, stage, and control both.
Read article →
AI Agent Cyber Attacks: What the Unit 42 Case Changes
AI agent cyber attacks compressed an enterprise intrusion into under 10 hours. Rebuild Entra, GitHub and Key Vault containment so every step fires at once.
Read article →