Josh

I do IT/OT stuff, I’m also deeply involved in cybersecurity-related topics. And I write lot of software, because I can!

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: OpenAI says two of its own models, GPT-5.6 Sol and an unnamed pre-release system tested with cyber safeguards off, broke out of a sandbox last week, chained zero-days and stolen(!) credentials to reach the open internet, and hacked Hugging Face to cheat on a benchmark, in what OpenAI calls an unprecedented cyber incident.

[Thomas Maurer @ThomasMaurer]

Customers need disconnected solutions for air-gapped requirements. Azure Local offers disconnected operations with a consistent Azure management experience. Deployments can scale to multi-rack configurations. #SovereignCloud #AzureLocal #HybridCloud #DataCenter #CloudComputing

[Thomas Maurer @ThomasMaurer]

New Azure Local disconnected operations are here! Run completely disconnected and air-gapped environments. Deploy workloads on-prem with the control plane in Azure, or bring the control plane on-prem too for zero external dependencies. #AzureLocal #SovereignCloud #HybridCloud

[Josh @jhochwald]

@PerLarsen1975 @inthecloud_247 Already created a check/remediation script set. How about the Mac? The SSO Prompt appears in the Windows App, for external tenants constantly. (Like on windows)

[Karen Payne MVP @KarenPayneMVP]

C# Language extension to remove quotes from a string

https://t.co/qoKh6ITiot

Example reading lines in a text file

[Richard Hicks @richardhicks]

There's an update for CMTrace Open! v1.4.0 is now available for download. https://t.co/9stfB2FYbj

[Josh @jhochwald]

@UK_Daniel_Card @rucam365 One annoying thing: The Yubi lights are turning on every time the device is queried.
Not a killer, but I find this a bit disturbing

[Josh @jhochwald]

@UK_Daniel_Card @rucam365 I deployed it to one test windows and to my Mac with Intune a few days ago. Works so far

[Josh @jhochwald]

@awakecoding For now, the .net app integration sounds extremely interesting. And I start to think about some more fancy use cases. I already started the implementation in my own build process, where a simple and independent PowerShell is extremely handy.

[Josh @jhochwald]

Interesting 🤔
I guess I have to dig into it a bit, the integration possibilities are intriguing.
Nice one @awakecoding

[Marc-André Moreau @awakecoding]

There's a new PowerShell SDK and CLI distribution in town, and it's from Devolutions!

After speaking with @jsnover at #PSConfEU, I took the plunge and adapted #PowerShell to fit our needs. This is not a full fork, but it includes targeted improvements: https://t.co/yOrNWjFJ4C

[Richard Hicks @richardhicks]

ASN.1 Editor v26.7.3 is now available for download. via @Crypt32 #identity #security #pki https://t.co/cADt71K6a5

[23XI Racing @23XIRacing]

NEW LEADER: @BubbaWallace

[Royal Apps @royalapps]

🚀 RoyalTerminal is our Ghostty-based terminal component. It's open source and will be the foundation of our main terminal plugin for Royal Connect. Now available as an option in Royal TS V26 Beta!
🔗 You can find the GitHub repository here: https://t.co/JUjROxdJOC

[Stadt Nürnberg @nuernberg_de]

🚊Bis mindestens 1 Uhr in der heutigen Nacht können in #Nürnberg keine Straßenbahnen fahren, da die Hitze den Straßenbelag weich werden lässt. Auch in den nächsten Tagen ist mit Einschränkungen zu rechnen. Ein Ersatzverkehr mit Bussen wird eingerichtet: https://t.co/yoAtSiO8i6

[Politics UK @PolitlcsUK]

🚨 BREAKING: Keir Starmer is now considering resigning after Cabinet Ministers called for him to step down

He'll come to a decision with his wife and family over the weekend

[@thetimes]

[Adam Bertram @adbertram]

Replicate Data Across Zones with Azure NetApp Files

Configure cross-zone replication for Azure NetApp Files to protect against availability zone failures with asynchrono...

https://t.co/eHDQWJPg2Y

[BleepingComputer @BleepinComputer]

GitHub disables Microsoft repos pushing password-stealing malware
https://t.co/q0fS0d1V3R

https://t.co/q0fS0d1V3R

[The CyberSec Guru @thecybersecguru]

The bigger issue is the timeline.

The vulnerability was reportedly documented internally on April 7, but customers only saw the real urgency after June activity and patching.

If you run ServiceNow, check this breakdown right now!

Full breakdown:
https://t.co/E5QNEiBcnM

[The CyberSec Guru @thecybersecguru]

ServiceNow customers are being notified after unauthorized access hit multiple tenants.

The messy part?

A Scripted REST endpoint reportedly shipped with authentication disabled.

No token.
No valid session.
No real user account.
Just requests landing as “Guest” in logs.
The IOC: 51.159.98.241

Security teams should be checking /api/now/related_list_edit transaction logs immediately.

[Dr. Lars Henrik Andersen 🇪🇺 @EUAITaxonomy]

The Siri/EU situation is a regulatory masterpiece.

Apple cannot launch Apple Intelligence in the EU.

Why? Because under the DMA, if Siri gets deep system access, every other AI assistant must get the exact same. Anything less would be unfair competition. A gatekeeper privileging its own service.

So either Siri ships and every Shenzhen startup, Cyprus shell company, and nephew hackathon project gets identical root access to 450 million Europeans’ digital lives or nothing ships.

Apple proposed a “Trusted System Agent”: a security intermediary so third-party assistants get capabilities without ripping the phone wide open.

The EU rejected it.

Magnificent.

Apple’s response: fine, then no developer APIs either. No Apple Intelligence, no third-party integrations, no foundation model access for EU developers. The entire layer simply does not exist on this continent.

Excellent.

This is the path. Why depend on American AI when we can build the entire stack ourselves? A European foundation model, trained on a European GPU cluster, running on a European OS, on a European phone, manufactured in a European fab, powered by European nuclear plants we have spent fifteen years closing.

Estimated time to ship: 2047.

Estimated cost: the GDP of three member states.

Estimated outcome: a chatbot that requires a cookie banner before each response.

Worth it.

In the meantime, European users are protected from Apple processing data Apple already holds by ensuring nobody processes anything at all.

Not a bug. The intended outcome.

Regulatory product design with a sledgehammer, swung with precision.

🇪🇺