When the Control Isn't the Boundary: Unsigned Tokens and Leaky File Watchers
·1296 words·7 mins
Two late-September 2026 disclosures, an unsigned-token flaw in Microsoft’s internal Titan analytics service and cross-user leakage through OS file-notification APIs, show how easily the control you point to can differ from the control that actually enforces access.