Microsoft’s September 2025 security updates have broken connectivity to SMBv1 shares over NetBIOS over TCP/IP (NetBT), disrupting Windows client and server systems that still rely on this legacy protocol. This article explains what SMBv1 is, why it remains in use despite being deprecated, and the serious security risks that come with it. We’ll cover the details of the September updates, their impact on affected systems, and the available workarounds for organizations struggling to restore functionality. Finally, we’ll look at user feedback and long-term recommendations for migrating away from SMBv1 to more secure and modern protocols.

Source

Microsoft has introduced a new BlockNTLMv1SSO registry key in Windows 11 24H2 and Windows Server 2025 as part of its broader initiative to deprecate NTLM authentication. The new registry key allows administrators to control NTLMv1-derived credential usage. These changes address ongoing security vulnerabilities in NTLM while providing organizations time to transition to modern alternatives like Kerberos.

Source

OpenAI has finally rolled out Model Context Protocol (MCP) support for all ChatGPT subscription plans. However, the implementation is surprisingly basic and falls short of the MCP support offered by Anthropic's Claude Desktop. Currently, ChatGPT doesn't support local MCP servers (SDIO), and you can only add remote MCP servers (SSE, Streamable HTTP). There's also no MCP server catalog, and the worst part is that GPT-5 isn't fully MCP-ready.

Source

Citrix has announced a fundamental shift in managing product licensing by replacing traditional file-based licensing with a cloud-based License Activation Service (LAS). This mandatory transition affects all on-premises Citrix components, with file-based licensing reaching end of life on April 15, 2026. The change simplifies license management by eliminating manual license file downloads and uploads. The change simplifies license management by eliminating manual license file downloads and uploads. LAS requires registering with Citrix Cloud and periodic connectivity to maintain activations; limited offline operation is supported via a grace period.

Source

The days of purely signature-driven antivirus and malware protection are over because modern threats evolve too quickly, using advanced techniques that traditional signature databases can't keep up with. ManageEngine Malware Protection Plus (MPP) is a next-generation antivirus solution that leverages AI capabilities to detect malware and contemporary security threats.

Source

Microsoft is transforming its certification portfolio to align with the growing demand for artificial intelligence expertise, introducing new AI certifications while retiring several fundamental certifications. The company is launching updated certifications emphasizing practical skills in generative AI, multi-agent orchestration, and Microsoft's AI ecosystem, including Copilot and Azure AI services.

Source

Microsoft's August 2025 update caused a Windows UAC bug that triggers unplanned User Account Control (UAC) prompts throughout Windows environments. This problem originates from security improvements included in the August 12, 2025, cumulative patches for all supported Windows editions—specifically KB5063878 (Windows 11 24H2), KB5063875 (Windows 11 22H2/23H2), and KB5063709 (Windows 10 22H2 and Windows 10 Enterprise LTSC 2021)—which resolved CVE-2025-50173 but inadvertently created compatibility problems with Windows Installer maintenance functions.

Source

Microsoft introduced a new granular policy-based approach in Windows 11 25H2 that allows administrators to selectively remove pre-installed Microsoft Store apps through Group Policy and mobile device management (MDM) solutions like Microsoft Intune, rather than only disabling the Store globally as earlier policies did. This feature addresses long-standing demands from IT professionals for a supported method to eliminate unwanted applications from Windows deployments.

Source

MPA Tools, created by Veles Software, is an endpoint management and troubleshooting solution for Windows environments that addresses gaps in Microsoft's existing system administration tools. The endpoint solution offers real-time visibility and workflow automation for Intune, Microsoft Configuration Manager (ConfigMgr), and Active Directory environments. A key feature is its ability to manage endpoints without agents.

Source

Microsoft's Intune August 2025 service release (2508) delivers major endpoint management enhancements, including granular app control targeting, Windows Autopilot OOBE patch integration, and Apple Declarative Device Management reporting capabilities. The update introduces multi-administrator approval workflows for critical operations and expands Linux support to Ubuntu 22.04/24.04 LTS while addressing enterprise security and governance requirements. However, administrators should be aware of reported performance issues with app control policies and several critical bugs affecting Win32 app filtering, iPad Air 2 management, and Linux device enrollment that may impact deployment strategies.

Source

Windows 11 25H2 has entered the Release Preview Channel as Microsoft's latest annual feature update. It marks a departure from traditional major releases by prioritizing stability over extensive new functionality. The update shares a servicing branch with Windows 11 24H2, meaning that no new features have been added. This approach represents Microsoft's focus on reliability following previous update challenges.

Source

Windows Backup for Organizations is Microsoft's new cloud-based solution that helps enterprises preserve user settings and Microsoft Store app lists, enabling rapid restoration during device transitions, resets, and migrations to new Windows environments. This article examines the technical requirements for backup and restore operations, including supported Windows versions and device configurations. The coverage includes three deployment methods through Group Policy, Microsoft Intune, and Configuration Service Provider (CSP) settings, along with their installation requirements. Operational aspects include the automated eight-day backup schedule, Out-of-Box Experience integration, and Conditional Access considerations that affect authentication during restore processes. The article also addresses limitations, regional availability restrictions, and critical user feedback.

Source

The Model Context Protocol (MCP) makes building intelligent integrations between large language models (LLMs) and cloud services easier. By combining MCP with Azure Functions, developers can expose serverless tools that LLMs can securely call in real time. This article describes how to set up Azure Functions as a custom MCP server, extend it with custom tools, and connect it to clients such as VS Code in Agent Mode.

Source

Microsoft has released Windows Terminal version 1.23 as a stable update, and version 1.24 as the latest preview, both bringing major improvements to the popular command-line tool. These versions introduce a completely new windowing architecture, expanded settings in the user interface, and other powerful enhancements for productivity and customization. In this article, we’ll explore what’s new in these updates and to how to install the latest stable and preview builds through Microsoft Store, winget, choco, and scoop.

Source

The Chorus app is built to send prompts to multiple AI models from different providers simultaneously. You can also query several search engines with each prompt. Both methods significantly reduce the risk of hallucinations. Update: I don't recommend getting a Chorus subscription. You'll have a hard time unsubscribing, and you won't receive any support.

Source

In my last post, I discussed Perplexity's aim to transform the familiar blinking web we've known for decades. It brings to mind the early days of Google, when many questioned the need for another search engine since AltaVista already did a good job. Although Comet appears to be just another Chromium-based web browser, the AI powering the browser under the hood has the same disruptive potential as Google's PageRank algorithm once did.

Source

Perplexity's new AI-powered Comet web browser, initially exclusive to Max subscribers at $200 monthly, is now accessible to Pro subscribers for $20. I tested it and am impressed—both by Perplexity's hypocrisy and Comet's truly innovative browsing experience. This post shares my rant against Perplexity, while my next post will praise Comet, the first browser on the battlefield in the new browser war.

Source

In my previous Ollama series post, I explained how to access self-hosted AI models in Ollama via HTTP. While this method provides convenient connectivity from different apps, it's only secure for on-premises Ollama hosts. For remote internet access, you can set up an SSH tunnel. Alternatively, you can securely connect from GitHub Copilot to your self-hosted AI models by using Microsoft's VS Code extension Remote - SSH.

Source

In my previous post in the Ollama series with OpenAI OSS models, I explained how to install Ollama on an Ubuntu EC2 instance. If you followed my guide, you now have everything set up to remotely access gpt-oss-20b on your self-hosted Ollama installation via HTTP. I will also showcase how to connect to remote AI models in VS Code using popular coding assistants like Cline and Roo Code, as well as through AI apps such as the local Ollama client, BoltAI, and Anything LLM.

Source