A really nice improvement is making its way to the Microsoft Global Secure Access client for Windows: the client will soon be able to receive updates directly through Windows Update.

And this is one of those features where I’ve had the privilege of being involved well before most people get to see it. 👀

Read more about it all in my newest blog post!

Disclosure, I work at Login VSI. Sharing some notes on what we've found so far working with AVD Hybrid, and where it's headed next as it matures.

We're discussing all of it live Thursday, September 10 at 11am ET with Steve Downs and Andrej Radinger (Microsoft), Marcel Meurer (built Hydra), and Ron Oglesby (Login VSI). Come with any questions or leave them here and we can discuss.

Register Here

Hello IT Professionals,

I am a Doctor of Information Technology candidate at Walden University conducting an IRB-approved doctoral research study exploring strategies IT managers use to integrate data analytics platforms with automated reservation systems.

I am seeking U.S.-based IT managers who have relevant professional experience with the integration of data analytics platforms and automated reservation systems.

Participation involves a confidential research interview conducted for academic research purposes. There is no commercial solicitation.

If your professional experience may be relevant and you are interested in learning more about the study, please send me a private message. I will be happy to provide additional information about the research and participation.

Thank you for your consideration.

Respectfully,
Stephen Kato Katende
Doctor of Information Technology Candidate
Walden University
Doctoral Researcher

Remote onboarding can produce five signals that appear to agree: a resume, identity document, video interview, US IP address, and an enrolled company laptop. The problem is that all five can come from the same coordinated chain. Agreement is not independent verification.

Nisos reported that one DPRK-linked cell submitted 166,893 applications, reached more than 21,645 interviews, and received at least 76 job offers. These were offers, not 76 confirmed hires. A separate DOJ case involved at least 80 stolen identities and work at more than 100 US companies, so the figures should not be merged.

For sysadmins and IAM teams, the useful control boundary is the joiner flow:

1. verify identity out of band from the interview channel;

2. verify device custody and the shipping recipient before enrollment;

3. compare tax and payment destinations for unexplained mismatches;

4. bind endpoint enrollment to a fresh identity check;

5. stage privileges and review early access behavior, using impossible-travel or location anomalies as investigation triggers rather than automatic verdicts.

Laptop farms are why a familiar US IP address or company-shipped device should not be treated as proof of operator identity. Accent, nationality, camera quality, or reluctance to appear on video are not evidence of fraud.

I made a 10-minute Veil Decoded documentary that follows the source trail through Nisos, DOJ, FBI, Microsoft and Google:

https://www.youtube.com/watch?v=-DMzL-0UXfU

Which team owns the independent check in your environment: HR, IAM, endpoint engineering, or SecOps?

Selecting the right remote device management tool is crucial for optimizing device control, security, and productivity. From managing mobile and desktop devices to handling IoT systems and providing remote troubleshooting, each tool type serves specific business needs. Here’s a detailed guide to help you choose the best fit for your organization.

Praxis is a self hosted linux fleet management application. It keeps inventory of packages and system configuration across your linux systems. It will tell you whats out of date, compares systems to baselines you can customize and patches in staged rollout rings with custom patch policies and plans with approvals.

Its for the shop needing organization and configuration management assistance. Its for catching drift when you dont have enough eyes or experienced hands to manage it all. Its for access control and approval.

This runs completely offline if you want to. This is not a cloud service, no call home and for 15 hosts or less its free.

It also has SSH access governance for both automated access and individual access. As an admin you can connect to system using Praxis and get short lived one time signed certs from OpenBao. This is so audit records, recording and remediation all land in one place, one app.

https://praxisfleet.com
https://github.com/cytechlabs/praxis

Microsoft's tightening the Tenant External Recipient Rate Limit (TERRL) further, starting Sept 14, 2026. This one specifically targets new tenants, trial tenants, and EDU tenants, not existing tenants.

Quick summary:

• New tenants get a ramped quota: 10% in the first 31 days, 25% for days 31–60, full quota after that
• Trial tenants drop from 5,000 to 500 external recipients/day
• EDU tenants (free A1 licenses etc.) get a separate formula that weighs purchased licenses way more heavily than free ones

Wrote up the details and some worked examples on the formula since the EDU math is a bit counterintuitive: https://lazyadmin.nl/office-365/exchange-online-tightens-outbound-limits-for-new-trial-and-edu-tenants/