September 2026 Summaries

SAP Privileges 2.6.0, the Mac Admins osquery extension, and Fleet’s agent added coordinated support for auditing macOS administrator-rights changes within roughly a week. Privileges enables temporary, self-service elevation for standard users and now uses Apple’s Endpoint Security framework to record every administrator grant or removal, including the responsible process, providing more detail than earlier generic change detection. Administrators can access this history locally through PrivilegesCLI, while the new privileges_events osquery table makes the same data available as SQL-queryable rows across an entire fleet, including changes made outside Privileges through System Settings or scripts. Deployment requires enabling the Privileges system extension and granting Full Disk Access, ideally through MDM configuration profiles, while existing osquery apps and system_extensions tables can report the app’s installation, version, and extension status.

Fleet Device Management announced on its sixth anniversary that it has joined Anthropic’s Project Glasswing controlled-access program for Claude Mythos Preview to evaluate frontier AI applications for device management, MDM protocols, and supporting infrastructure. The company plans to examine how AI could improve endpoint-state analysis, remediation prioritization, and the speed and safety of security operations as organizations face increasingly rapid AI-driven attacks. Fleet cited its research finding that 79% of organizations need more than a day to deploy critical patches, despite vulnerabilities sometimes being exploited within hours, underscoring the gap between threat emergence and remediation. Through early access to the technology, Fleet intends to test AI capabilities in real-world endpoint security workflows and share resulting lessons and best practices openly with customers and the broader security community.

Fleet CEO Mike McNeil will speak at Oktane 2026, held September 22–24 at Caesars Forum in Las Vegas, about extending consistent identity controls to Linux devices alongside macOS and Windows, with session details to be announced after the final schedule is released. Fleet will also exhibit at a booth, where it plans to discuss deeper Okta integrations for Linux, including device posture, FastPass, and passwordless sign-in, while demonstrating existing integrations such as managed Okta Verify deployment, Okta Device Access configuration for macOS and Windows, SAML-based single sign-on, and SCIM user and group synchronization. Booth visitors can receive a non-resale Fleet Premium license for up to 10 personal devices for two years, and those not attending can still try Fleet or contact the company.