September 15 – September 21, 2025
With the release of VMware Cloud Foundation 9.0, VMware is ushering in a new era of private cloud management, where data services become an integral part of the automated platform. A key element of this transformation is VMware Data Services Manager (DSM) 9.0, an advanced Database-as-a-Service (DBaaS) tool that is now fully integrated with VCF...
Dry, an interactive cli for Docker containers
While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant. The vulnerability consisted of two components: undocumented impersonation tokens that Microsoft uses in their backend for service-to-service (S2S) communication, called “Actor tokens”, and a critical vulnerability in the (legacy) Azure AD Graph API that did not properly validate the originating tenant, allowing these tokens to be used for cross-tenant access.
None
Release notes for Ghostty 1.2.0, released on September 15, 2025.
News about asciinema development and new releases
So, you proudly wired up your VCF 9 environment to an Identity Broker, hit save, and thought: “Nice, job done.” But then you realize… you just pointed your shiny Los Angeles VCF instance at the San Francisco Identity Broker. Oops. Now every time you try to configure Identity Broker in LA, it just kicks you… Read More »