Blog

Articles on OS baselining, supply chain security, and operating system hardening best practices.

A laptop glowing on a dark desk under the headline Unsanctioned AI, work machines, no approval, reading tabs, via browser extensions

16 min read · macOS 26.5 (sweep run 2026-10-03)

Unsanctioned AI: How to Find It on Every Machine You Manage

Unsanctioned AI is any AI tool doing company work without approval. IBM says shadow AI involvement more than doubled in a year. We swept one developer Mac, found AI in five places, and turned the swee...

A laptop with a padlock on its keyboard in a dark office, under the headline One setting, Credential Guard, stops password dumping

14 min read · Windows 11 25H2

Windows 11 Security Baseline: The Complete Hardening Guide for 2026

Learn how to baseline and harden Windows 11 using Microsoft Security Baselines, CIS Benchmarks, and DISA STIGs. Covers the 25H2 baseline, ASR rules, BitLocker, credential protection, and deployment st...