NewApp Digest
search bot

AI tool

Microsoft's Windows K2 overhaul is making File Explorer launch much faster
Winsage
May 12, 2026

Microsoft’s Windows K2 overhaul is making File Explorer launch much faster

Microsoft is reassessing its strategy following criticism and a decline in user satisfaction related to its AI tool, Copilot. The company is unwinding some Copilot integrations and reallocating resources to address issues with Windows 11, particularly focusing on improving File Explorer. Windows K2 will enhance File Explorer's performance, utilizing the WinUI 3 framework, which aims to streamline operations. Recent benchmarks show significant reductions in resource consumption for File Explorer, including 41% fewer allocations, 63% fewer transient allocations, 45% fewer function calls, and a 25% reduction in time spent in WinUI code. Improvements are expected to be rolled out soon.
Microsoft Releases Enterprise Policy Option to Disable Windows 11 Copilot
Winsage
April 28, 2026

Microsoft Releases Enterprise Policy Option to Disable Windows 11 Copilot

Microsoft has introduced a new enterprise policy setting that allows IT administrators to silently uninstall the Microsoft Copilot app from managed Windows 11 devices. The RemoveMicrosoftCopilotApp policy became available after the April 2026 Patch Tuesday security updates and is compatible with enterprise management solutions like Microsoft Intune and System Center Configuration Manager (SCCM). Administrators can find the policy in the Group Policy Editor under User Configuration > Administrative Templates > Windows AI > Remove Microsoft Copilot App. It specifically targets Windows 11 Pro, Enterprise, and Education SKUs, excluding Home edition users. The uninstallation process is triggered when three conditions are met: Microsoft 365 Copilot is installed on the device, it was provisioned (not user-installed), and it has not been launched by the user in the last 28 days. The policy was initially available for Windows Insiders in January 2026 and became generally accessible afterward. However, future updates or user reinstalls from the Microsoft Store may reintroduce the Copilot app, necessitating ongoing policy enforcement for permanent removal. Organizations seeking broader exclusion may need to use PowerShell scripts or additional MDM configurations.
NGate Android malware uses HandyPay NFC app to steal card data
AppWizard
April 21, 2026

NGate Android malware uses HandyPay NFC app to steal card data

A new variant of the NGate malware targets Android users by disguising itself within a trojanized version of the HandyPay app, which is a legitimate mobile payment processing application. This malware, documented since mid-2024, siphons payment card information through the mobile device's near-field communication (NFC) chip and sends the stolen data directly to attackers, who create virtual cards for unauthorized purchases or cash withdrawals from NFC-enabled ATMs. The new variant has been injected with malicious code into the HandyPay app, which has been available on Google Play since 2021. The code includes emojis, indicating the possible use of a generative AI tool in its development. The shift from previous iterations, which used an open-source tool named NFCGate, to HandyPay is likely motivated by financial considerations and the need for evasion, as HandyPay is more affordable and requires fewer permissions. This NGate variant has been active since November 2025, primarily targeting Android devices in Brazil. It employs two main distribution methods: a counterfeit app named “Proteção Cartão” hosted on a fraudulent Google Play page and a fake lottery website that redirects users to WhatsApp to download the malicious APK. Upon installation, the app prompts users to set it as their default NFC payment application, requests their card PIN, and instructs them to tap their card on the phone for reading, transmitting all collected information to an attacker's email address. To protect against such threats, Android users are advised to avoid downloading APKs from outside Google Play, disable NFC when not in use, and use Play Protect to scan for threats.
Fake Claude site installs malware that gives attackers access to your computer
Tech Optimizer
April 13, 2026

Fake Claude site installs malware that gives attackers access to your computer

Claude, an AI tool developed by Anthropic, receives nearly 290 million web visits monthly and has become a target for cybercriminals. A fake website has been found that impersonates Claude, distributing a trojanized installer named Claude-Pro-windows-x64.zip. This installer, while appearing legitimate, deploys PlugX malware, granting attackers remote access to users' systems. The fraudulent site mimics the official download page and uses passive DNS records linked to commercial bulk-email platforms, indicating active maintenance by the operators. The ZIP file contains an MSI installer that incorrectly spells "Claude" as "Cluade" and creates a desktop shortcut that launches a VBScript dropper. This script runs the legitimate claude.exe while executing malicious activities in the background, including copying files to the Windows Startup folder to ensure persistence after reboot. The attack utilizes a DLL sideloading technique recognized by MITRE as T1574.002, where a legitimate G DATA antivirus updater is exploited with a malicious DLL. Within 22 seconds of execution, the malware establishes a connection to an IP address associated with Alibaba Cloud, indicating control over the compromised system. The dropper script also employs anti-forensic measures to delete itself and the VBScript after deployment. Indicators of compromise include the filenames Claude-Pro-windows-x64.zip, NOVUpdate.exe, avk.dll, and NOVUpdate.exe.dat, along with the network indicator 8.217.190.58:443 (TCP) as the command and control destination. Users are advised to download Claude only from the official site and to remain vigilant against potential compromises.
Copilot is gone from Windows 11, but here's why this isn't the win it sounds like
Winsage
April 13, 2026

Copilot is gone from Windows 11, but here’s why this isn’t the win it sounds like

Major tech companies, including Microsoft, are integrating artificial intelligence into their products. Microsoft has embedded its AI tool, Copilot, into various applications but is now retracting it from some, including Notepad, due to user backlash. Users have expressed dissatisfaction with Copilot's integration, leading to a petition against its use in basic applications. In response, Microsoft plans to reduce unnecessary Copilot integrations while maintaining some AI functionalities through a new Writing Tools menu. Users can also disable AI features in applications like Notepad by adjusting settings.
This is probably the first mainstream mini PC that can dual-boot Ubuntu and Windows out of the box — and it even comes with the hottest AI application of 2026
Winsage
March 26, 2026

This is probably the first mainstream mini PC that can dual-boot Ubuntu and Windows out of the box — and it even comes with the hottest AI application of 2026

GMKtec has launched the NucBox K13 mini PC, which supports dual-booting of Windows 11 Pro and Ubuntu. It features an Intel Core Ultra 7 256V processor with eight cores up to 4.8GHz and an Intel Arc 140V GPU. The device offers 16GB of LPDDR5X RAM, dual M.2 SSD slots for up to 16TB of storage, Wi-Fi 6E, and five-gigabit LAN. It supports triple 4K display outputs and includes various ports such as USB 3.2 Gen2, USB4, HDMI 2.1, and a 5Gbps RJ45 LAN port. Concerns have been raised about the AI tool OpenClaw, which has known vulnerabilities and has been linked to malware, leading Microsoft to advise against its use on personal or enterprise systems.
OpenAI is shutting down Sora, and the timing is hard to ignore
AppWizard
March 25, 2026

OpenAI is shutting down Sora, and the timing is hard to ignore

OpenAI has announced the discontinuation of its Sora app, expressing gratitude to its users and indicating plans to share more information soon. Launched in late 2024, Sora gained popularity but faced high operational costs, reportedly reaching millions per day. The shutdown coincides with Disney's withdrawal of a billion-dollar investment related to OpenAI's video generation initiatives. While OpenAI may be stepping away from standalone video generation, its technology is expected to be integrated into ChatGPT. Bill Peebles, head of Sora, noted that the app's economics were unsustainable, leading to the decision to discontinue it and streamline operations.
Search