LiteLLM, RAGFlow, Kestra: Your AI Gateway Is a Control-Plane Target
AI gateway security after Microsoft's August findings: find exposed LiteLLM, RAGFlow and Kestra hosts in Azure, isolate them, rotate keys, detect abuse.
Read article →
Tag
Tag: Security
28 articles
Emergency Patches Outside Microsoft: Adobe Commerce StyleSmuggler, N-able N-central, and PEEP
Critical patches for Adobe Commerce StyleSmuggler, N-able N-central Hotfix 4, and PEEP Chromium backdoor. Verify exposure and patch order.
Read article →
Teams Helpdesk Impersonation: When the Attack Rides a Trusted Workflow
Teams helpdesk impersonation turns one approved remote session into domain access. The kill chain, KQL hunting queries, and the settings that stop it.
Read article →
September 2026 Patch Tuesday: 966 Fixes, Two Zero-Days to Triage First
September 2026 patch tuesday shipped 966 fixes and two exploited zero-days — the triage order, expedite paths, and KQL to run while you deploy.
Read article →
Entra ID Passkeys in 2026: What Changed and Why to Move Now
Synced passkeys are GA, passkey profiles are live, and passkeys become Entra ID's default sign-in on 1 September 2026. What changed and how to move.
Read article →
Microsoft Is Retiring SMS and Voice MFA: Your Entra ID Migration Plan
Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →
Securing Azure OpenAI for the Enterprise: Private Endpoints, Entra ID Auth, and Content Filtering
Azure OpenAI private endpoint security done right: lock down deployments with Private Link, Entra ID auth, and content filtering before production.
Read article →
Azure Front Door vs Application Gateway vs Traffic Manager: Choosing Your Load Balancing Layer
Azure Front Door vs Application Gateway vs Traffic Manager: cut through the overlap and pick the right load balancer with this decision framework.
Read article →
Entra ID Privileged Identity Management: Rolling Out Just-in-Time Admin Access
Entra privileged identity management setup done right: configure JIT admin access, approval workflows, and alerts to eliminate standing privileges.
Read article →
Kubernetes Admission Controllers: Enforcing Policy with OPA Gatekeeper vs Kyverno
OPA Gatekeeper vs Kyverno compared: Rego vs YAML authoring, mutation, policy testing, webhook latency, Azure Policy for AKS, and a decision framework.
Read article →