The ITAM Roundup: 1/26/25
📰 News
Free Copilot Chat Lands For All, Exchange Audit Logging Changes & The New Outlook Arrives: The Practical 365 Podcast S4 E34
This week on the Practical 365 Podcast, Paul Robichaux and Steve Goodman discuss Microsoft’s decision to make Copilot Chat free for all Microsoft 365 commercial users, marking a major step in democratizing AI access. Key topics include changes to Exchange Online audit logging with a shift to the Unified Audit Log by 2025, the imminent rollout of the new Outlook client via Windows Update, and new Power Platform tenant-to-tenant migration previews aimed at simplifying mergers and acquisitions. They also cover Microsoft’s CoreAI reorganization, document summarization in Word, and a recent MFA incident in Western Europe, highlighting the evolving landscape of Microsoft 365.

Citrix acquires thin-client provider Unicon to strengthen endpoint management and security
Citrix has acquired Unicon GmnH, a provider of thin-client solutions, to enhance its endpoint management and security offerings. Unicon's eLux OS and Scout enterprise platform are designed to help organizations scale and secure endpoint devices, reduce IT costs, and extend the life of hardware. This acquisition will allow Citrix to provide more secure, cost-effective endpoint management and support its customers' hybrid work models, offering seamless access to corporate applications and desktops.

BMC Software survey: IT leaders bullish on generative and agentic AI
A survey by BMC Software and Dimensional Research reveals that while 94% of organizations include generative AI in their IT strategies, only 17% have moved beyond the experimental phase, with just 5% reporting mature implementations. Key challenges include scattered data repositories, limited use cases, and a knowledge gap around generative and agentic AI, though optimism remains high, with 98% expecting productivity and cost benefits. Despite concerns about AI's impact on jobs, 63% believe it will enhance roles, reflecting a view of AI as a tool to augment rather than replace human expertise.

Data Center News Roundup: $500B Stargate Project, Data Centers on the Moon?
This week’s Data Center News highlights the unveiling of the $500 billion Stargate Project, led by tech giants to build AI-focused data centers across the U.S., though experts question its ambitious scale and execution feasibility. Other developments include major investments by XTX Markets, AWS, and CtrlS, as well as advancements in nuclear-powered data centers and innovative cooling technologies. Additionally, Lonestar Data Holdings is preparing to launch the first-ever lunar data center, continuing its bold plans to integrate data storage with space exploration.

VMware users gripe over 3-year commitment to renew licenses
VMware customers are upset with the new licensing terms following Broadcom's acquisition, which now require a three-year commitment for vSphere renewals instead of the previous annual option. This change, part of Broadcom's strategy to simplify its product offerings and prioritize enterprise customers, has led to complaints about significantly increased fees and disrupted budgeting for smaller businesses. While Broadcom claims flexibility, many customers feel forced into longer contracts and are considering migration to alternative platforms despite the challenges involved.

AI procurement management software startup Vertice raises $50M
Procurement software startup Vertice has raised $50 million in a Series C funding round, bringing its total funding to over $100 million and its valuation to $500 million. Vertice's AI-driven platform helps businesses optimize software and cloud infrastructure spending by providing real-time pricing insights, benchmarks, and procurement analytics to improve decision-making. With over $3.4 billion in software spending facilitated and clients such as ASML and Santander, Vertice plans to enhance its AI capabilities and expand into new markets with the new funding.

📖 Tips
FinOps automation: Raising the bar on lowering cloud costs
FinOps automation enhances IT organizations' ability to manage and optimize cloud costs by leveraging data engineering, targeting high-cost areas, and developing tools engineers can use effectively. Intuit focuses on AWS accounts and Kubernetes cost allocation to streamline prepayment optimization and accurate forecasting, while Roku employs the 80/20 rule and dynamic cost-saving strategies like Kubernetes autoscaling and prepayment plans. Both companies highlight how automation drives transparency, accountability, and significant cost savings, serving as valuable examples for organizations aiming to improve cloud spending efficiency.

IT Asset Tagging: How to Tag Software And Hardware Assets
IT asset tagging involves labeling software and hardware assets with unique identifiers for efficient tracking and management throughout their lifecycle. This practice, which can include physical tags like QR codes or digital tags within IT Asset Management (ITAM) systems, improves asset visibility, lifecycle management, and operational efficiency. Adopting consistent tagging standards, utilizing a centralized ITAM platform, and implementing security measures are key to successful IT asset tagging.

Bye-Bye Spreadsheets: Master IT Asset Management in 2025
Many businesses still use spreadsheets for IT asset management due to their familiarity and perceived cost-efficiency, but these tools fall short as organizations grow, causing inefficiencies, errors, and collaboration challenges. Upgrading to dedicated asset management software offers significant benefits, including centralized data organization, automated workflows, and enhanced security and compliance, helping teams save time and make better decisions. To ensure a smooth transition, organizations should clean their existing data, select the appropriate migration method, and prioritize key features like customizable reporting, automated tracking, and integration with other business systems.

Updated 2025! Microsoft Customer Agreement – a complete guide to MCA-E
The Microsoft Customer Agreement (MCA) is a digital, evergreen contract introduced by Microsoft to simplify the purchasing process for cloud products and services, replacing older agreements like the Enterprise Agreement (EA) starting in 2025. It offers flexibility, streamlined billing, and direct or partner-led procurement options, but raises concerns about price protection, customization for enterprises, and integration with existing licensing structures. While the MCA aims to innovate and reduce administrative overhead, its impact on partners, licensing transparency, and large-scale enterprise adoption remains a work in progress.

🐛Bugs & Exploits
Don't want your Kubernetes Windows nodes hijacked? Patch this hole now
A vulnerability (CVE-2024-9042) in Kubernetes allowed attackers to exploit a command-injection flaw in Windows nodes running beta Log Query features, enabling SYSTEM-level code execution. While the flaw has been patched in Kubernetes 1.32.1, experts warn the exploit is easy to recreate, and administrators are advised to patch their clusters immediately, even if they don’t use Windows nodes. Though exploitation remains unlikely due to specific conditions required, this serves as a critical reminder about the importance of secure coding practices.

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management
Cisco has released a patch for a critical 9.9-rated vulnerability (CVE-2025-20156) in its Meeting Management tool, which allows a remote, authenticated attacker to escalate to administrator privileges via a flawed REST API authorization. The bug affects most versions of Cisco Meeting Management, and users are advised to update to version 3.9.1 or newer to fix the issue. While no in-the-wild exploits have been reported yet, experts warn that exploitation is likely imminent, and users should apply the patch as soon as possible.
