ASCII Smuggling: Invisible Unicode Is Slipping Past Your Phishing Filters
ASCII smuggling phishing hides invisible Unicode inside lure words to dodge keyword filters — how it works, and how to normalize before you match.
Read article →
Tag
Security
32 articles
Secure Boot Certificates and Memory Integrity by Default in Windows
Windows secure boot certificate update 2026 lands the same month Memory Integrity turns on by default — how to inventory, stage, and control both.
Read article →
AI Agent Cyber Attacks: What the Unit 42 Case Changes
AI agent cyber attacks compressed an enterprise intrusion into under 10 hours. Rebuild Entra, GitHub and Key Vault containment so every step fires at once.
Read article →
LiteLLM, RAGFlow, Kestra: Your AI Gateway Is a Control-Plane Target
AI gateway security after Microsoft's August findings: find exposed LiteLLM, RAGFlow and Kestra hosts in Azure, isolate them, rotate keys, detect abuse.
Read article →
Emergency Patches Outside Microsoft: Adobe Commerce StyleSmuggler, N-able N-central, and PEEP
Vendor patches your Microsoft cycle won't show you: N-able N-central CVE-2026-86218, Adobe Commerce StyleSmuggler and the PEEP Chromium backdoor.
Read article →
Teams Helpdesk Impersonation: When the Attack Rides a Trusted Workflow
Teams helpdesk impersonation detection: the kill chain, KQL hunting queries and the settings that stop one approved remote session becoming domain access.
Read article →
September 2026 Patch Tuesday: 966 Fixes, Two Zero-Days to Triage First
September 2026 patch tuesday shipped 966 fixes and two exploited zero-days — the triage order, expedite paths, and KQL to run while you deploy.
Read article →
gMSA, dMSA and the Service Account Problem Nobody Solved
Group managed service accounts security rests on two things almost nobody audits: the password retrieval ACL and the forest KDS root key. Fix both.
Read article →
Entra ID Passkeys: Profiles, Synced Keys and a Rollout Plan
Plan your Entra ID passkey rollout: synced passkeys are supported, profiles control attestation and AAGUIDs, and passkeys are now the default sign-in.
Read article →
Microsoft Is Retiring SMS and Voice MFA: Your Entra ID Migration Plan
Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →