- ▸ firewall-rules-nobody-can-explain.md · 17 sep 2026
Don't migrate a firewall rule nobody can explain
FireMon's June 2026 analysis of 9.2 million firewall policy checks found 69% of rules unused and 45% with no owner or documentation. Migrations usually copy that kind of ruleset into the new landing zone, because a copied rule breaks nothing on cutover night. Rebuild it from sixty days of VNet flow logs instead, and give a flow a rule only when somebody can say what it is for.
read → - ▸ delete-the-secret-dont-rotate-it.md · 21 aug 2026
Delete the secret, don't rotate it
GitGuardian found 64% of the valid secrets they reported to owners in 2022 were still working this January, and that 59% of compromised machines in their incident data were CI/CD runners. Rotation is losing. Azure DevOps has also put a date in the calendar: the old issuer for workload identity service connections retires on 1 July 2027. What to convert your service connections to, how to do the whole project in one pass, and the query that finds every secret you are still holding.
read → - ▸ llm-endpoints-new-public-storage.md · 13 aug 2026
LLM endpoints are the new public storage accounts
Credential theft aimed at AI services rose 376% in a quarter, and Microsoft is in court with a group that resold stolen Azure OpenAI access. The LLM endpoint is this decade's default-shaped misconfiguration: deployed like an experiment, billed like a utility, and secured with a key from demo day. The three ways to host a model in Azure, and the controls you already own that make a stolen key worthless.
read → - ▸ identity-is-the-perimeter.md · 26 jul 2026
Identity is your security perimeter now
The firewall stopped being the front door a while ago. In a cloud estate, identity is where an attacker gets in or gets stopped, so it's where the design attention belongs.
read → - ▸ find-public-storage.md · 22 jul 2026
Find your public-facing storage before someone else does
A storage account open to the public is a common way cloud data leaks. Find every one across your estate in about thirty seconds with one query.
read →