Please turn JavaScript on
The Nine Lives Brief banner
The Nine Lives Brief icon

The Nine Lives Brief

Subscribe to Nine Lives, Zero Trust, and get security insights delivered to your inbox.

Here's what you'll get:

  • Zero Trust insights you can actually use

  • DevSecOps practices for building security into your pipeline

  • Threat intel worth knowing

  • Cloud security tips from the trenches

  • Secure coding and shift-left strategies

  • The occasional cat pun (we're paranoid about spam, not fun)

Whether you're building secure infrastructure, automating compliance, or navigating the multi-cloud maze, this newsletter has you covered.

Filter by topic to get precisely what you need. Unsubscribe anytime.

Stay curious. Stay secure. Land on your feet.

Message History

My test Deployment had two ready pods. I deleted one. Kubernetes replaced it, and the new pod inherited the same writable-root-filesystem setting.

Kubernetes did exactly what you asked. The workload template still described that configuration.

Microsoft’s October 5, 2026 Defender for Cloud update brings Kubernetes security posture management fin...


Read full story

Microsoft’s fall security updates change several assumptions that are easy to leave buried in an old runbook: what a Security Administrator can do during an incident, whether Sentinel automation needs Security Copilot capacity, which risk-policy configuration stays supported, and whether a new Azure subscription receives free posture checks automatically.

The immediate...


Read full story

Microsoft is changing three parts of the Entra authentication and recovery experience between now and next March:

On September 1, 2026, users enabled for SMS or voice begin moving into Microsoft-managed passkey registration. Microsoft says SSPR will accept only explicitly registered authentication methods, but its published campaign and ...

Read full story

Microsoft published its technical analysis of GigaWiper on July 9, 2026. Microsoft describes it as a modular backdoor with destructive capabilities, including scheduled-task persistence, RabbitMQ-over-AMQP command C2, Redis status and output reporting, potential file transfer to remote storage through the MinIO client, interactive system management, event-log...


Read full story

CISA revised the Microsoft Expanded Cloud Logs Implementation Playbook on May 1, 2026. The document itself is not a shiny new product launch. The revision history calls it version 1.1 with general content and URL up...


Read full story