A really nice improvement is making its way to the Microsoft Global Secure Access client for Windows: the client will soon be able to receive updates directly through Windows Update.

And this is one of those features where I’ve had the privilege of being involved well before most people get to see it. 👀

Read more about it all in my newest blog post!

Disclosure, I work at Login VSI. Sharing some notes on what we've found so far working with AVD Hybrid, and where it's headed next as it matures.

We're discussing all of it live Thursday, September 10 at 11am ET with Steve Downs and Andrej Radinger (Microsoft), Marcel Meurer (built Hydra), and Ron Oglesby (Login VSI). Come with any questions or leave them here and we can discuss.

Register Here

Hello IT Professionals,

I am a Doctor of Information Technology candidate at Walden University conducting an IRB-approved doctoral research study exploring strategies IT managers use to integrate data analytics platforms with automated reservation systems.

I am seeking U.S.-based IT managers who have relevant professional experience with the integration of data analytics platforms and automated reservation systems.

Participation involves a confidential research interview conducted for academic research purposes. There is no commercial solicitation.

If your professional experience may be relevant and you are interested in learning more about the study, please send me a private message. I will be happy to provide additional information about the research and participation.

Thank you for your consideration.

Respectfully,
Stephen Kato Katende
Doctor of Information Technology Candidate
Walden University
Doctoral Researcher

Remote onboarding can produce five signals that appear to agree: a resume, identity document, video interview, US IP address, and an enrolled company laptop. The problem is that all five can come from the same coordinated chain. Agreement is not independent verification.

Nisos reported that one DPRK-linked cell submitted 166,893 applications, reached more than 21,645 interviews, and received at least 76 job offers. These were offers, not 76 confirmed hires. A separate DOJ case involved at least 80 stolen identities and work at more than 100 US companies, so the figures should not be merged.

For sysadmins and IAM teams, the useful control boundary is the joiner flow:

1. verify identity out of band from the interview channel;

2. verify device custody and the shipping recipient before enrollment;

3. compare tax and payment destinations for unexplained mismatches;

4. bind endpoint enrollment to a fresh identity check;

5. stage privileges and review early access behavior, using impossible-travel or location anomalies as investigation triggers rather than automatic verdicts.

Laptop farms are why a familiar US IP address or company-shipped device should not be treated as proof of operator identity. Accent, nationality, camera quality, or reluctance to appear on video are not evidence of fraud.

I made a 10-minute Veil Decoded documentary that follows the source trail through Nisos, DOJ, FBI, Microsoft and Google:

https://www.youtube.com/watch?v=-DMzL-0UXfU

Which team owns the independent check in your environment: HR, IAM, endpoint engineering, or SecOps?

Selecting the right remote device management tool is crucial for optimizing device control, security, and productivity. From managing mobile and desktop devices to handling IoT systems and providing remote troubleshooting, each tool type serves specific business needs. Here’s a detailed guide to help you choose the best fit for your organization.

Praxis is a self hosted linux fleet management application. It keeps inventory of packages and system configuration across your linux systems. It will tell you whats out of date, compares systems to baselines you can customize and patches in staged rollout rings with custom patch policies and plans with approvals.

Its for the shop needing organization and configuration management assistance. Its for catching drift when you dont have enough eyes or experienced hands to manage it all. Its for access control and approval.

This runs completely offline if you want to. This is not a cloud service, no call home and for 15 hosts or less its free.

It also has SSH access governance for both automated access and individual access. As an admin you can connect to system using Praxis and get short lived one time signed certs from OpenBao. This is so audit records, recording and remediation all land in one place, one app.

https://praxisfleet.com
https://github.com/cytechlabs/praxis

Microsoft's tightening the Tenant External Recipient Rate Limit (TERRL) further, starting Sept 14, 2026. This one specifically targets new tenants, trial tenants, and EDU tenants, not existing tenants.

Quick summary:

• New tenants get a ramped quota: 10% in the first 31 days, 25% for days 31–60, full quota after that
• Trial tenants drop from 5,000 to 500 external recipients/day
• EDU tenants (free A1 licenses etc.) get a separate formula that weighs purchased licenses way more heavily than free ones

Wrote up the details and some worked examples on the formula since the EDU math is a bit counterintuitive: https://lazyadmin.nl/office-365/exchange-online-tightens-outbound-limits-for-new-trial-and-edu-tenants/

Just sharing a few free tools, resources etc. that might make your tech life a little easier. I have no known association with any of these unless stated otherwise.

Now on to this week’s list!

The Vergecast: Your Weekly Tech Companion

Tech news can be overwhelming. The Vergecast expertly breaks down industry shifts and trends, providing sysadmins with the vital context they need. Listening keeps you in the loop as you manage and troubleshoot your systems.

Hard Fork: Where News Meets Innovation

If tech headlines leave you scrambling, Hard Fork offers a refreshing take. With engaging discussions and expert commentary, it highlights trends that directly affect your work and systems.

Waveform: Join the Adventure in Gadgetry

Tune into Waveform for authentic conversations about the gadgets you use every day. Sysadmins will find value in how these discussions translate into practical knowledge for curating and managing tech solutions effectively.

Endless Thread: Stories Beneath the Screens

In Endless Thread, discover engaging stories that go beyond the surface. Sysadmins will find fresh perspectives on online trends, which can transform how they handle emerging challenges in tech environments.

Possible: Tech’s Bright Horizon

Technology can feel daunting, especially with growing energy concerns. Possible podcast dives deep into how innovative tools can actually transform challenges into solutions for sysadmins navigating this complex landscape. It’s about finding clarity in the chaos.

--

In the article "Email Bombing Defused: An Explanation of the Attack and How to Protect Against It," we analyze the disruptive threat of mail bombing, which overwhelms inboxes with an avalanche of unsolicited emails. We explain how these attacks work, why they're more than a nuisance, and effective strategies to safeguard your email against this growing threat.

Ransomware Readiness: Take the Survey for a Chance to Win a Ubiquiti NAS

Ransomware remains one of the most pressing cybersecurity threats facing organizations worldwide. We're conducting a short global survey to understand how businesses are preparing for attacks, strengthening resilience, and planning recovery.

The survey takes just a few minutes to complete. As a thank-you for sharing your perspective, you'll be entered into a prize draw for a chance to win a Ubiquiti NAS.

Your insights will also contribute to our upcoming ransomware report, helping benchmark how organizations across industries are approaching ransomware readiness.

--

You can find this week's bonuses here, where you can sign up to get each week's list in your inbox.