Azure Managed Identity vs Service Principal: Which to Use

Azure managed identity vs service principal decision diagram for Entra ID workloads

Most Azure managed identity vs service principal debates start from a false split. A managed identity is a service principal. Microsoft’s docs say Azure creates a service principal of a special type in Entra ID for every managed identity. The… Read moreAzure Managed Identity vs Service Principal: Which to Use

Podman Checkpoint CVE: How a Sandbox Bypass Works

podman checkpoint annotation diagram showing a crafted image bypassing sandbox flags

If you run Podman in production, a container image can now disable the sandbox restrictions you explicitly asked for, just by carrying one annotation. CVE-2026-94603 is a podman checkpoint handling bug that tricks podman run into treating an ordinary image… Read morePodman Checkpoint CVE: How a Sandbox Bypass Works