Microsoft disclosed CVE-2026-85889, a CVSS 10.0 missing-authentication flaw in Azure AI Foundry, on September 17 and said no customer action is required because the fix was applied server-side across …
A new guide details how MCP apps should implement authentication, arguing that OAuth 2.1 with PKCE, Dynamic Client Registration (RFC 7591), and Authorization Server Metadata (RFC 8414) are mandated by…
Microsoft's September 2026 Patch Tuesday cycle included 964 total CVEs, the largest volume recorded to date, and three high-severity vulnerabilities in the Azure identity stack, all fixed through serv…
Io.github.darrenjrobinson/entrapulse-polyarchy v0.2.1, an interactive Entra ID identity relationship visualization published to the official MCP registry on 2026-09-02 and distributed as entrapulse-po…
Microsoft's Azure OpenAI Service and the direct OpenAI API run identical models, but differ in infrastructure, authentication, and compliance. Azure offers data residency, managed identity authenticat…
Microsoft made passkeys the default sign-in method in Entra ID in September, forcing millions of tenants to migrate, while Entrust recorded one deepfake identity attack every five minutes—a 2000% surg…
GitHub's August 17, 2026 outage, which lasted nearly eight hours and affected API requests, Actions, pull requests, Issues, webhooks, and Copilot, was exacerbated by authentication-token retries that …
Microsoft warns that attackers are using AI to generate realistic device names, such as 'Work PC', to bypass traditional detection in Entra ID attacks, with nearly one in seven Entra ID environments e…
ASOS, the online fashion retailer, is hiring a Platform Engineer for its Data Science & AI Platform in London, UK, with a hybrid work model. The role involves building and evolving infrastructure for …
In-house legal teams can now describe an NDA-approval tracker or matter-intake form in plain English, and Remy (goremy.ai) compiles it into a deployed application with a real database and role-based a…
Horizon3.ai, the company behind the NodeZero platform, announced that its autonomous security platform has completed more than 300,000 production penetration tests since 2019, emphasizing that the key…
Cloud security firm Wiz disclosed CosmosEscape, a critical vulnerability in Microsoft Azure Cosmos DB that chained multiple flaws to obtain the platform-wide Cosmos Master Key, enabling attackers to e…
A critical vulnerability in Microsoft Azure's Cosmos DB database service, dubbed CosmosEscape, could have allowed attackers to escape the Gremlin query sandbox, execute arbitrary code on shared infras…
Wiz researchers discovered CosmosEscape, a flaw in Azure Cosmos DB's Gremlin API that exposed a platform-wide master key granting read-write access to every Cosmos DB account, including network-isolat…
Microsoft is replacing OpenAI's image-generating models with its own MAI technology in PowerPoint and Bing, citing 85% lower costs, and will phase out SMS-based logins for its Entra ID service by Febr…
Microsoft will make passkeys the default authentication method in its Entra ID cloud-based identity and access management service starting September 1, 2026, and will end SMS and voice authentication …
Phlox-GW, an open-source LLM gateway, launches with features including Entra ID and OIDC SSO, cost accounting, budget enforcement, rate limits, smart routing, guardrails, user-owned API keys, observab…
MailKite launches an alternative to Microsoft Graph for AI agents, offering scoped email addresses and parsed JSON webhooks without requiring Entra app registration, tenant-wide admin consent, or expi…
Zep released the Memory MCP Server, enabling any MCP client to access a unified user memory graph governed by enterprise single sign-on. The server allows desktop assistants, coding agents, and custom…
A developer built an Agentic SOC Analyst using Microsoft Sentinel, Azure Log Analytics, and Google's Gemini model to automate threat-hunting workflows. The system translates natural language requests …