Sponsor
How to remove Otter AI from your org
AI notetakers like Otter AI spread fast. In fact, one Nudge Security customer discovered 800 new accounts created in only 90 days 😱 Viral AI notetakers introduce a slew of data privacy risks by gaining access to calendars and adding themselves to every meeting.
Learn how to find and remove viral ai notetakers.
Hello, Neo
Apple had told us to anticipate a "big week" and did they deliver!
iPhone 17e, iPad Air with M4, new(ish) Studio Displays, MacBook Air with M5, and MacBook Pro with M5 Pro and M5 Max.
This alone would have made for a "big" week, but there was well, one new thing: The MacBook Neo.
New Mac product lines are rare. The last time we got a new Mac was the Mac Studio in 2022. The last new MacBook was the 12" MacBook in 2015. One could argue both the 12" MacBook and the Neo to be a continuation of the iBook/MacBook line. There are many similarities, especially to the iBook and it's introduction in 1999. But the 12" MacBook was a very different introduction, more similar to the 2008 MacBook Air.
While the rumor mills had been anticipating or spoiling a new low-end MacBook line for quite a while, the exact specs did turn out to be quite surprising. It comes with an A18 Pro chip. If you have concerns about this, the MacBook Neo is not for you. It'll be fine for the target audience.
There are other design choices Apple made to cut the price of the Neo. Stephen Hackett has a good list. But cut the price they did. US$599 entry price. $499 for education. Even the $699 price to bump the storage to a useful 512GB and add Touch-ID seem very muchapple.o worth it.
This is the lowest ever list price ever for an Mac notebook. It has generally (and approximately) been the case that for the price of a MacBook Pro (the "real" one, with the Pro chip), you can get a MacBook Air and an iMac or Mac mini with a good third party display.
Now, you can get a MacBook Neo and a brand new iPhone 17e for $100 more than the entry level MacBook Air. You can add a Mac mini, a decent third party display, and some Airpods Pro before you reach the price of the "real" MacBook Pro.
Another comparison is that you can get four MacBooks Neo at the education price for the education price of a 14" MacBook Pro with an M5 Pro chip. Five Neos for the 16".
(David points out that Apple sometimes just says "Neo" instead of "MacBook Neo" in their marketing material. I don't know what it means, but Apple marketing not using the full product name is… unprecedented.)
The fact that this entry level now exists for a Mac notebook is quite astounding. And it doesn't just exist, I expect the Neo to absolutely be a usable Mac. I know this because I used an M1 MacBook Air with 8GB of RAM for two years as my main driver and it was perfectly fine.
The specs of the Neo will be as good or better than the M1 Air. If you do any half-way silicon-intensive task professionally, you should upgrade to Air or Pro, that's why they exist. But many people do not need this, or not frequently enough to justify the expense.
My only disappointment is that it is neither lighter nor significantly smaller than the MacBook Air. But then, making things smaller and lighter often makes them more expensive. See: MacBook Air in 2008, 12" MacBook from 2015, and iPhone Air from 2025.
Even professionals who mainly do browsing and email and and do most of their work inside cloud services should be well-served with the MacBook Neo. They would have been well-served with an iPad Air with a Magic Keyboard, but the price of that combination is closer to a MacBook Air than the Neo.
Mac Admins are going to manage a lot of these, and not just in education.
Since the Apple silicon transition, the definition of "minimum professional Apple notebook" has moved from a base config 16" MacBook Pro to a 15" MacBook Air. MacBook Neo might continue this trend, maybe not right away, but this is likely not going to be the only generation.
On the other extreme of the performance spectrum, Apple introduced the Pro and Max version of the M5 chip generation this week. (Micheal Tsai's summary) This comes along with a confusing renaming of the core types. (Rocket Yard has a good explainer) Apple now seems to be using the "Fusion" architecture where they connect two dies with a high bandwidth connector. This has so far only appeared on the Ultra versions of the M-chips in the Mac Studio and Mac Pro but now seems to be used all the way down to the Max and Pro.
While this is undoubtedly exciting for the high-end MacBook Pro, it also puts a bit of a spotlight on the fact that no desktop Macs have received M5 updates yet. The Mac Studio Ultra is still on the M3 and the Mac Pro on the M2!
A Mac mini with M5 Pro will have quite the price/performance ratio.
Well, it's not that much longer until WWDC!
📰 News and Opinion
The Window Chrome of Our Discontent
This is a laudable goal if the opposite is, I assume, increasing the amount of clutter in user interfaces and making them more distracting. Nobody wants that. Then again, while the objective may be quite reasonable, there are surely different ways of achieving it
⚙️ Apple Updates
- macOS Tahoe 26.3.1 (25D2128): What's new, IPSW, PKG installer, no security notes, no enterprise notes
- iOS 26.3.1, iPadOS 26.3.1, iOS 18.7.6
macOS Tahoe 26.3.1 Update! Everything you need to know
Apple just released the 2nd minor update for macOS Tahoe to the public! Let’s jump in and find out what’s new.
🔐 Security and Privacy
Mitigation assets and detection patterns for AI agents like OpenClaw
Personal AI assistants are here to stay. The goal in a managed environment is to understand what's running to make informed decisions on governance and use.
Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets
A convincing fake version of the popular Mac utility CleanMyMac is tricking users into installing malware
🔨 Support and Tutorials
How macOS 26 Tahoe updates
Although the way that macOS updates itself has changed beyond all recognition over the last few years, we tend to assume that it still works much as it did in the past
Part 2: Finite State Machines
Privilege Elevation with Self Service+
Rodney Freeman on Jamf Tech Thoughts:
how to configure and use temporary privilege elevation on macOS using Self Service+.
GlobalProtect Patch Management with Jamf Pro and Title Editor
he overall workflow can be adopted by any organization using Jamf Pro and Title Editor to manage applications distributed through restricted channels, such as GlobalProtect or other internally licensed or access-controlled software.
Silencing Apple Passwords and Enabling Third-Party Autofill
Apple does not expose third-party password manager extension states as managed preference keys
Low Profile Walkthrough and Review
Low Profile, a utility from Nindi Gill that I use when I want to inspect profiles already installed on a Mac and figure out whether those profiles contain issues I need to clean up.
QuickPKG: More to Unpack
a review of QuickPKG, a tool I love, and use almost daily. What I really love about packaging and QuickPKG is that no matter what MDM I am working in at any given moment, it provides a universal way to create a quick package to import into JAMF, Mosyle, or any MDM.
Part 1: Walkthrough and Review
The Right Agent, at the Right Time: Understanding LaunchAgent conflicts between Jamf Connect, and Jamf Self Service+
Philip Ross
This post is designed to highlight the changes to the LaunchAgent that runs the Account Management features of Self Service+, formerly included in Jamf Connect.
From ClickOps to Code: Terraforming a Live System
Applying Infrastructure as Code (IaC) using Terraform in an existing, already-provisioned environment is often called Brownfield Terraform.
🤖 Scripting and Automation
Fun with the `date` terminal command in macOS
This isn’t a comprehensive list of everything you can do with the date command in macOS, but it’s just a few examples of fun things you can do with date in the Terminal.
Create custom profiles using JamfUploader without a template file
Graham Pugh:
This post concerns creating custom macOS configuration profiles.
Using the Jamf Pro API to delete computers from Jamf Pro
Rich Trouton:
I need to delete one or multiple computers from a Jamf Pro server. This can be accomplished in the Jamf Pro admin console, but it can also be accomplished via the Jamf Pro API’s computers-inventory API endpoint.
♻️ Updates and Releases
🎧 Listen
Email Ecosystems: Navigating Apple and Outlook
about self-hosted, locally run AI for clients who want AI-powered editing without sending sensitive content to cloud services like ChatGPT, Gemini, or Claude.
2 steps forward with cyber security using local AI
Christophe Frenet from Dashlane joins the show to talk about the company's new AI powered tool to detect browser based scams.