Security architecture write-ups by David Gillot: incidents, controls and what actually changed, seen through the attacker's eye.https://davidgillot.nl/enhttps://davidgillot.nl/2026/04/11/microsoft-sfi-series-part-3/https://davidgillot.nl/2026/04/11/microsoft-sfi-series-part-3/How Microsoft rebuilt token signing after Storm-0558: hardware security modules, confidential computing, key partitioning and forged token detection.Sat, 11 Apr 2026 08:35:41 GMTMicrosoftSecure Future InitiativeWrite-upAnalysishttps://davidgillot.nl/2026/04/04/microsoft-sfi-series-part-2/https://davidgillot.nl/2026/04/04/microsoft-sfi-series-part-2/Keys in software storage, no rotation, a broken trust boundary and no forged-token detection. The four failures behind Storm-0558, one by one.Sat, 04 Apr 2026 14:15:22 GMTMicrosoftSecure Future InitiativeWrite-upAnalysishttps://davidgillot.nl/2026/03/28/microsoft-sfi-series-part-1/https://davidgillot.nl/2026/03/28/microsoft-sfi-series-part-1/A 2016 signing key, 22 breached organizations and a government agency that spotted it before Microsoft did. How Storm-0558 started the Secure Future Initiative.Sat, 28 Mar 2026 11:20:56 GMTMicrosoftSecure Future InitiativeWrite-upAnalysis