Blogs

Tenant Restrictions v1 can block access to unapproved Entra tenants while still allowing Microsoft consumer accounts unless a second header is injected into a different authentication endpoint.

The recent wave of agent sandbox escapes is being treated as something fundamentally new.

AADLC started as a way to stop coding agents rediscovering the same truths every session.

We keep acting like doors are portals into trust and expected good behaviour.

The next generation of supply chain attacks aren’t targeting packages.

GitHub's AI Credits rollout wasn't really a pricing story.

First observations from GitHub Copilot’s move from Premium Requests to AI Credits: compatibility fields, confusing reports, missing model attribution, and why AI FinOps now needs its own flight data recorder.

A follow-up to AADLC: how usage-based AI billing, semantic hydration, prompt-as-code, and field-testing turned a coding workflow into a governance model for delegated cognition.

From capabilities to consequences: mapping, testing, and proving exploit paths in MCP-driven AI systems.

How cost pressure, structured baselines, clean context, and multi-model orchestration led to a practical agentic SDLC.

A deep dive into CVE-2026-31431 -- a Linux kernel primitive that turns containers into stepping stones, and why seccomp might be your fastest seatbelt.

We all understand water.

Part 3 of 3.

Part 2 of 3.

Part 1 of 3.

OID-See v1.1.0 adds JWT parsing and external identity posture, a universal graph view with iOS support, eight cross-tenant filter presets, new scanner authentication methods, and a fully Web Worker-backed architecture.

A deep dive into deploying Umami with Netlify and Azure PostgreSQL, covering Prisma quirks, CSP pitfalls, cold start behaviour, cost trade-offs, and what I’d do differently next time.

From Milgram to cognitive overload to modern agent systems, none of this is new.

MCP doesn’t fail because of network latency.

Agentic AI systems that can directly commission humans for real‑world tasks represent a qualitative shift in risk.

Hero image generated by ChatGPT This is a personal blog.

Microsoft recommends allowing the Azure Service Management API from BYOD to enable Dev Box access.

OID-See v1.0.1 tightens scoring logic, improves accuracy around app role assignments, ownership, and deception signals, and lays the groundwork for more trustworthy Entra ID app risk analysis.

Conditional Access is often treated as a fine-grained policy engine, but recent platform design choices show that many modern Microsoft workloads collapse behind shared identities and brokers.

OID-See or BloodHound for OAuth in Entra: mapping consent, scopes, assignments, and trust signals into a graph so you can spot impersonation risk and OAuth sprawl.

An investigation into plaintext persistence and invisible data propagation through Microsoft Edge Drop.

Hero image generated by ChatGPT This is a personal blog and all content herein is my own opinion and not that of my employer.

Updated resources, exam lessons, and study guidance for the GCP Professional Cloud Security Engineer certification in 2025

SPADE describes how adversaries can abuse trusted SaaS-hosted runtimes like Google Colab to exfiltrate data and evade CASB, EDR, and proxy controls - bypassing enterprise defenses via unexpected channels.

Hero image generated by ChatGPT This is a personal blog.

Highlighting Microsoft’s documentation and UX tweaks--and the remaining unfixed vulnerability

Learn how to avoid common anti-patterns when authenticating to Google Cloud using service accounts in Python--especially in CI/CD pipelines like Azure DevOps.

How action slips and repetitive workflows create security risks -- and why it's time to design for the human brain, not against it.

Why users struggle with Zero Trust and other security principles, explained through the lens of episodic memory, the doorway effect, and cognitive psychology.

Exposing how Microsoft Intune's device filtering can be trivially bypassed to evade Conditional Access controls.

Entra and Entra Hybrid has a huge attack surface and you're likely not even remotely aware of how easy it is to attack undetected.

How Microsoft's Isolation of Control Plane and Data Plane for Key Vault is flawed

Exposing how control plane exploits in Microsoft’s iPaaS services enable silent data harvesting from workflows and secrets.

This is a personal blog and all content therein is my personal opinion and not that of my employer.

This is a personal blog and all content therein is my personal opinion and not that of my employer.

Cover Photo by ChatGPT Introduction In this post, I’m going to talk about a recent experience having a vulnerability in this website reported to me, the whole experience and how I dealt with it.

How I Dorked My Way Into Meeting With Canadian cybercrime

A reflection on becoming a first-time author and pivoting careers, highlighting challenges, growth, and lessons for others considering similar journeys.

Chatbot too chatty, wants everyone to talk to it.

Study Guide: Google certified Professional Cloud Architect

Surprising and shocking RBAC discoveries and why you need to pay close attention to RBAC role permissions - especially those the vendor manages!

I had been having frustrating issues with connectivity on my iPhone lately - here is how I fixed them!

Cover Photo generated with AI - 19th November 2023 at 17:59 UTC by DALL-E 3 via Bing Chat Introduction In this post, I’m going to talk about a problem I recently experienced with permissions in GitHub, how I worked around them and what you need to k…

Every resource you could ever need to study for the PCSE exam

Introduction I recently managed to pass the Google Cloud Certified: Professional Cloud Security Engineer exam.