Teams Archives

Winsage

September 24, 2026

These three Microsoft 365 apps lasted just one year before getting axed

Microsoft will retire the Calendar, People, and Files companion apps from its Microsoft 365 suite on December 16, 2026. These apps were launched a year ago to enhance productivity by providing quick access to information via the Windows 11 taskbar. However, their role has shifted from essential tools to supplementary resources, as users can access the same information through existing Microsoft services. Microsoft recommends alternatives such as Outlook, Teams, Windows Search, File Explorer, SharePoint, OneDrive, Word, Excel, and PowerPoint for users to utilize after the retirement of these apps.

Winsage

September 24, 2026

Microsoft 365 Companion Apps Are Being Retired

Microsoft will retire its Microsoft 365 companion apps for Windows 11, including the Calendar, People, and Files companion apps, by December 16, 2026. These apps were introduced at no additional cost to users with eligible Microsoft 365 or Office 365 licenses, with the Files and People apps debuting in March 2025 and the Calendar app in May 2025. Microsoft integrated its Copilot feature into these applications last October. Users are advised not to wait until the retirement date, as the apps will become non-functional prior to December 16. Administrators can remove these apps as needed, and Microsoft has provided a template for notifying users. Alternatives for functionality include Outlook, Teams, Windows Search Box, File Explorer, SharePoint, OneDrive, and Office applications.

AppWizard

September 24, 2026

Ando wants to take on Slack with a team messaging app that lets humans and agents work together

In 2025, Sara Du identified challenges in integrating AI agents within communication platforms like Slack while assisting companies with MCP servers. She criticized the design of these platforms for treating AI agents as separate applications rather than team participants. Du proposed a solution to eliminate intermediaries between AI agents and teams, envisioning a system where agents could engage directly in conversations, understand decisions, ask questions, and autonomously notify humans when necessary. Du's startup, Ando, launched as a messaging platform that allows both human and AI workers to communicate seamlessly, featuring channels, direct messages, and live calls. Ando has raised a million in pre-seed and seed funding from firms like Accel and Index Ventures. Despite existing competition from platforms like Slack and Microsoft, Du sees potential for Ando to disrupt the market by focusing on AI agent integration. Currently, Ando works with clients in software, real estate, and finance across 15 countries, primarily small teams, and aims to expand its capabilities with the new funding.

Winsage

September 24, 2026

One $32.97 purchase gets you Windows 11 Pro and the full Office suite for life

The bundle includes a Microsoft Office Pro license for permanent installation of applications like Word, Excel, PowerPoint, Outlook, Teams, OneNote, Publisher, and Access on a single PC, with Publisher support ending after October 2026. It also features Windows 11 Pro, which includes tools like BitLocker for data security, Remote Desktop for remote access, Hyper-V for running virtual machines, Snap Layouts for multitasking, and the Copilot feature for managing quick actions from the taskbar.

Winsage

September 24, 2026

Microsoft force-installed three apps on Windows 11, and now you have to delete them yourself

In early 2025, Microsoft introduced three applications—“People,” “Files,” and “Calendar”—as part of its “Microsoft 365 companions” initiative to enhance productivity. These apps were integrated into the Windows 11 taskbar for managing Microsoft 365 features. Microsoft planned to automatically install these apps on eligible PCs starting in late October 2025, but later decided to discontinue them. The companion apps will be retired by December 16, 2026, and users must manually uninstall them as they will not be removed automatically. To uninstall, users can go to Windows Settings > Apps > Installed apps or use PowerShell commands.

Tech Optimizer

September 23, 2026

BigDiskBuster PoC Blocks Windows Defender Updates

A new tool named BigDiskBuster has been released on GitHub, which disrupts Microsoft Defender Antivirus by preventing it from installing updates. It does this by consuming available disk space during the update process, causing Defender to remain on its current version and unable to receive new platform or signature updates. BigDiskBuster operates as a local denial-of-service technique and requires prior access to the target machine to execute. The tool was created by researcher Abdelhamid Naceri, known as Nightmare Eclipse, who has previously worked on similar projects. As of now, there is no CVE identifier, patch, or advisory from Microsoft regarding this issue.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a new Windows implant called CLOSEDQUORUM, which operates without human operators by using four commercial large language models (LLMs) to autonomously decide on actions after deployment. The implant is a 16.4-megabyte executable that conducts reconnaissance on the target system and sends structured prompts to the LLMs, which respond with one of four actions: steal, inject, persist, or move. When the "steal" action is chosen, it simultaneously attacks three credential stores, extracting Windows credentials, browser passwords, and cryptocurrency wallet data. The "inject" action uses either Early Bird APC injection or process hollowing based on model recommendations. For persistence, it employs three overlapping mechanisms, including a Registry Run key, a scheduled task, and a WMI event subscription. To evade detection, CLOSEDQUORUM suppresses ETW telemetry and introduces delays before executing actions. It circumvents traditional command-and-control structures by calling legitimate API endpoints, making blocking these domains impractical. Talos introduced the CAIRN toolkit for detecting AI-integrated malware, which operates on metadata and employs rule-based detection. Unlike previous AI-assisted malware, CLOSEDQUORUM automates decision-making processes entirely, highlighting a significant evolution in malware capabilities. Security teams are advised to focus on behavioral detection strategies and utilize the YARA rule and CAIRN toolkit for identifying this threat.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a Windows implant called CLOSEDQUORUM, which automates cyberattack execution using four advanced commercial large language models: DeepSeek, Qwen, Mistral, and Google Gemini. The implant is a 16.4-megabyte executable that conducts reconnaissance on the system and formats the gathered data into prompts for the AI models. Each model votes on one of four actions: steal, inject, persist, or move, with the action receiving the most votes being executed. When stealing, CLOSEDQUORUM targets three credential stores, dumping LSASS memory and retrieving saved passwords from browsers and cryptocurrency wallets. The stolen data is encrypted and sent to the operator via Discord. For injection, it uses Early Bird APC injection or process hollowing based on model responses. The persist action creates three mechanisms for longevity, including a Registry Run key, a scheduled task, and a WMI event subscription. CLOSEDQUORUM evades detection by suppressing ETW telemetry and delaying activity to avoid sandbox analyses. It connects to legitimate API endpoints, making blocking ineffective without disrupting enterprise applications. Talos recommends behavioral combination detection strategies and the use of a YARA rule for detection. The CAIRN toolkit has been introduced to detect AI-integrated malware without executing binaries. Unlike previous AI-assisted malware, CLOSEDQUORUM removes human decision-making from the attack process.

AppWizard

September 23, 2026

Expert Opinions and Insights from the Tech Industry

The Android development community has historically addressed memory optimization reactively, but new performance requirements from Google Play, effective February 2027, emphasize proactive memory management. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization, with apps needing at least 25% optimization coverage. Memory usage can now hinder releases even without local crash replication, necessitating its integration into the pre-production process alongside other performance metrics. Dynamic memory usage is defined as anonymous RSS plus swap, excluding file-backed data. Google Play will evaluate this across different application states and device performance categories. Bitmap memory is scrutinized for the retention of invisible bitmaps, and DEX optimization aims to reduce memory footprint and improve performance. Investigating memory growth involves using Android Studio’s Memory Profiler to monitor memory changes during specific user flows and conducting heap dumps to identify retained objects. Issues often arise from retained state, where components hold onto callbacks that reference image data, necessitating a focus on lifecycle management rather than merely cache size. Bitmap memory should be carefully managed, as the decoded size can significantly exceed the compressed file size. Downsampling images to match UI dimensions is crucial. Memory checks should occur before production, with a focus on establishing a memory budget based on actual measurements and defining representative memory scenarios for testing. A pre-release memory checklist includes running user flows repeatedly, testing on various devices, inspecting heap dumps, examining image configurations, and reviewing optimization metrics. Monitoring Android vitals and Play Console warnings is essential to detect potential issues before they lead to user-reported crashes.

AppWizard

September 21, 2026

When Memory Becomes a Release Metric: Preparing Android Apps for Google Play’s New Limits

In August 2026, Google Play announced new performance requirements for memory management that will be enforced starting February 2027. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization. Applications that exceed these thresholds may face reduced visibility and publishing capabilities on the platform. Dynamic memory usage is defined as the sum of anonymous RSS and swap, excluding file-backed data. Google is focused on whether applications retain non-visible bitmaps and requires at least 25% coverage in DEX optimization. Memory issues can be difficult to reproduce, and developers are encouraged to use Android Studio’s Memory Profiler to investigate memory growth. A thorough investigation involves monitoring memory changes, taking heap dumps, and understanding reference paths. Bitmap memory should be carefully managed, as the runtime cost of images can exceed their file size. Google will provide real-world memory metrics through the Play Console, and teams are advised to establish memory budgets and perform pre-release checks to identify potential issues before they lead to out-of-memory (OOM) crashes.