"I'm not what I do. I'm not what I have. I'm not what people say about me. I am the beloved of God. It's who I am. No one can take it from me. I don't have to worry. I don't have to hurry. I can trust my friend Jesus and share his love with the world." This is the “The Creed of the Beloved,” by pastor Bobby Schuller, inspired by theologian Henri Nouwen and Dallas Willard.

Did you know that there are 2 million people incarcerated in the US, and 97% will return to society, and 61% will re-offend within 10 years? That percentage drops to less than 5% with The Last Mile technical training, incarcerated men and women can evolve into highly skilled, motivated, and valuable professionals who deliver a return to those who invest in them. TLM training is now offered in 13 facilities across eight states, but they need your help. Please consider donating to the Last Mile, and I will match your gift. Learn more paving.thelastmile.org/joe-s…

‼️ An admin using the password "123456" led to the breach of 8.8 million people's data in Denmark, the hacker told. At least three accounts used it at Pays ApS, a two-person private IT firm with lawful access to the national population register.

Our students are preparing for tomorrow’s workforce on computers that date back to 2014. We need to change that. Across The Last Mile’s classrooms, approximately 300 students are building the skills they need for careers and successful reentry. Now, we’re working to replace aging classroom computers with modern, workforce-ready technology. And right now, every contribution can go twice as far. @ITguySoCal and @PatriotExperts will match every donation dollar-for-dollar, up to $100,000. If our community raises the full amount, together we can create $200,000 in total impact for TLM classrooms nationwide. If you’ve been looking for a meaningful moment to support The Last Mile, this is it. 👉 Visit the campaign page to watch the video, learn more, and join us: paving.thelastmile.org/joe-s…

Patriot Consulting and I are matching donations to help @TLM modernize technology classrooms inside correctional facilities, giving students skills to build meaningful careers and a new life after release. Learn more & please consider donating. paving.thelastmile.org/joe-s…

In this blog I compare OpenAI Dots vs Meta Muse vs Grok Bot vs Microsoft Autopilot (Scout) vs Open Claw Enterprise vs Hermes!! Feedback is welcome! patriotconsulting.com/blogs/…

Folks, you might have been caught out by this but it's what Microsoft said they would do, according to the docs. Since Sept 1, tenants with an attestation-enforced or AAGUID-restricted passkey policy are suddenly seeing users register synced and browser passkeys. Admins are asking "why isn't Microsoft respecting my FIDO2 policy?" Here's what's going on. The "Passkeys by default" retirement page on Learn (published July 14) says this in its Important box: "Users enabled for SMS or Voice ... will be auto-enabled for passkeys in AMP. These in scope users will be put into a passkey profile allowing ALL types of passkeys. Your Registration Campaign settings will be set to Microsoft Managed state targeting passkeys." Two important notes: 1. Passkey profiles are a union. If a user is in more than one profile, a passkey only has to satisfy ONE of them. So your attestation-enforced profile is still there. Microsoft just added a second, unrestricted profile next to it for every SMS/voice user, and that one wins for registration. 2. Your registration campaign state doesn't protect you. Disabled, Enabled, doesn't matter. The doc says it gets set to Microsoft Managed regardless, which is why some of you saw your campaign config wiped with Microsoft in the audit log. Even with the campaign off, the new profile lets users self-register a non-attested passkey from My Security Info. The ONLY way to avoid this was the opt-out flag on the authentication methods policy: PATCH graph.microsoft.com/beta/pol… { "optOutSettings": { "passkeyDynamicMigration": true } } Or moving users out of SMS and voice before Sept 1. Where Microsoft dropped the ball: the Message Center post (MC1426371) only says "passkeys will be automatically enabled for users currently enabled for SMS or voice." It never mentions a new unrestricted profile or that your attestation/AAGUID restrictions would be bypassed. And MC1469555 says the campaign "does not override configured passkey policies", which is technically true and practically misleading. The passkey profile part is only on Learn. So: not a bug, but a really important detail buried in one paragraph on a docs page. What to do now: - Look at your passkey profiles for a Microsoft-created one with both passkey types and no restrictions, and check who's targeted. - Set the opt-out flag if you need attestation to hold, then clean up that profile. Note the doc says the flag stops working Feb 1, 2027. - If you already had the flag set and it still changed, that IS a bug. Open a case. Docs: learn.microsoft.com/entra/id…

‼️ BREAKING: A 16-year-old hacker broke into an internal Microsoft analytics service with a forged, unsigned login token and ran SQL as admin, reaching databases that held over 17 trillion rows, including Bing search analytics and 17,990 employee email records. The service, called Titan, checked every field on the token except its signature, so just claiming to be "admin" got him in, writes the researcher, who goes by Faav. He says he only pulled metadata and two single rows of Bing data, never touched customer data, and reported the flaw to Microsoft the same night. Microsoft locked the endpoint four days later, paid him $5,000, and had editorial control over his write-up, cutting sections and figures and reshaping how the impact was described before it went public.

JUST IN: Florida judges warn of a flood of AI-generated “lawslop” clogging court dockets & threatening the administration of justice.

I understand not wanting to triage AI garbage Issues and PRs... but this is a horrible mistake Opening issues and PRs was the best way to communicate with the Learn documentation team (many of whom were laid off recently...) Nobody wants to submit feedback they can't track 😡

ISOC in Microsoft Defender is a benefit for M365 E5 and E7 customers, it is not a new product. Those lucky customers will save 44% off 3P security log ingestion. I spent all day reading and broke it down here to bring it to you straight: patriotconsulting.com/blogs/…

‼️ A fake LastPass download abuses a Microsoft-signed kernel driver to kill antivirus and EDR. The same payload steals browser passwords, crypto wallet files, and Discord, Steam, and Telegram sessions. How the signed driver gets trusted: thehackernews.com/2026/09/fa…

💡

Block all RMM installers!

A 10.0 Cisco ISE flaw is already under attack, according to the @CISAgov. Experts warn the authentication bypass could help intruders expand access inside networks and urge immediate patching. #cybersecurity #CISO #infosec bit.ly/4yHNBnY

🚨 TODD BEAMER, UNITED 93 PHONE CALL: "LET'S ROLL" 🇺🇸 Todd: Hello… Operator… listen to me. I can’t speak very loud. This is an emergency. I’m a passenger on a United flight to San Francisco. Our plane has been hijacked. Lisa: I understand. Can they see you? Todd: No. There are three that we know of. They have knives — razor knives, like box cutters. Someone announced from the cockpit there was a bomb. It sounded fake. Lisa: Your name? Todd: Todd Beamer. United Flight 93. Todd: They killed one passenger in first class. They forced most of us back. Fourteen of us here. Five flight attendants. The guy with the bomb ordered us to sit on the floor. Lisa: Are you okay? Todd: We’re going down… wait. No. We’re leveling off. We changed directions. We’re flying east again. Todd: A guy named Jeremy called his wife. She told him two planes hit the World Trade Center. Lisa, is that true? Lisa: I have to tell you the truth. It’s very bad. Both towers are gone. A third plane hit the Pentagon. Our country is under attack. I’m afraid your plane may be part of their plan. Todd: Oh God. Lisa, will you do something for me? Call my wife and my kids. Promise me you’ll call. Lisa: I promise. Todd: Our home number is… You have the same name as my wife. Lisa. We’ve been married ten years. She’s pregnant with our third child. Tell her I love her. I’ll always love her. We have two boys — David, he’s 3, and Andrew, he’s 1. Tell them their daddy loves them and he is so proud of them. The baby is due January 12th. I saw an ultrasound. We still don’t know if it’s a girl or a boy. Lisa: I’ll tell them. I promise, Todd.(Lisa patches in the FBI.) Agent: Todd, your plane is on a course for Washington. Best guess is the White House or the Capitol. Todd: I understand. I’ll be back. Todd: Everyone knows this isn’t a normal hijacking. We have decided we will not be pawns in their plot. Lisa: What are you going to do? Todd: Four of us are going to rush the one with the bomb. Then the cockpit. A stewardess is getting boiling water. We’ll take them out. Todd: Would you pray with me? [They pray the Lord’s Prayer.] Yea, though I walk through the valley of the shadow of death, I will fear no evil, for thou art with me. Todd: God help me. Jesus help me. Are you guys ready? Let’s Roll. SOURCE: @SterlingMSnow

September Patch Tuesday is breaking Remote Desktop Services on Windows Server 2019, 2022, and 2025. Servers work fine for a few hours after the update. Then RDS hangs. No official fix from Microsoft yet. 🧵

A newly discovered bug in the September Patch Tuesday rollout interferes with handshake authentication, forcing IT admins to halt deployments. #Windows11 #Microsoft #VPN neowin.net/news/windows-11-u…

KB5124008 just broke domain logons on Windows 11 25H2. Users getting "wrong password" with the right password. And cached credentials are hiding it from most admins right now. 🧵 (181/280 characters)

Domain Controllers typically run Microsoft DNS so this RCE is effectively an Active Directory RCE. Patch ASAP!