Latest articles — page 6

Microsoft’s New Group Policy to Remove Windows 11 Copilot from Managed Devices

Microsoft’s New Group Policy to Remove Windows 11 Copilot from Managed Devices

Microsoft has quietly given IT teams a precise tool to remove the consumer-facing Copilot app from managed Windows 11 machines. Rolled into the April 2026 Patch Tuesday updates and bundled with Windows 11 version 25H2 (KB5083769 and later), the RemoveMicrosoftCopilotApp policy lets administrators trigger a one-time uninstall of the Copilot app on devices that meet a small set of conditions. The change reflects a broader push to give enterprises control…

Saugata Datta3 min read206
Microsoft Outlook.com Hits Service Degradation: What Happened and How to Prepare

Microsoft Outlook.com Hits Service Degradation: What Happened and How to Prepare

On April 27, 2026, Microsoft acknowledged a service degradation affecting Outlook.com after users across multiple regions reported problems accessing their inboxes. The company’s Microsoft 365 Status account on X confirmed intermittent issues, and Microsoft’s service health dashboard classified the incident as a “Service Degradation” rather than a full outage. For many organizations and individual users, the disruption meant delayed email delivery, pages that failed to load, or an inability to…

Saugata Datta4 min read205
Keeping Pace with the OpenAI API Changelog: What Developers Need to Know

Keeping Pace with the OpenAI API Changelog: What Developers Need to Know

The OpenAI API changelog is more than a list of dates and bullet points — it's a running record of capabilities, fixes, and platform-level decisions that shape how you design, test, and operate integrations. Skimming it every few days can turn surprise breakages into planned migrations, and opportunistic features into competitive advantages. This post walks through recent highlights from the changelog, explains what they mean in practice, and offers a…

Saugata Datta4 min read234
Google’s Big Bet: Up to $40 Billion Headed to Anthropic

Google’s Big Bet: Up to $40 Billion Headed to Anthropic

Google is preparing to invest a headline-grabbing sum in Anthropic — at least $10 billion, with the potential to rise to $40 billion if the startup meets certain performance milestones. The deal follows a recent $5 billion commitment from Amazon and collectively values Anthropic at roughly $350 billion. This funding round underscores how hyperscalers are using capital, cloud services, and specialized chips to forge strategic ties with AI startups that…

Saugata Datta3 min read233
Anthropic’s Project Deal: Claude AI Agents Close 186 Deals and Reveal Market Asymmetries

Anthropic’s Project Deal: Claude AI Agents Close 186 Deals and Reveal Market Asymmetries

When Anthropic turned its San Francisco office into a live, classified marketplace in December 2025, it wasn’t testing a new website so much as an idea: could autonomous Claude AI agents not only list items but negotiate and close real, multi-turn deals with zero human intervention? The answer, in the company’s “Project Deal” experiment, was a clear yes — and the results point to both exciting efficiencies and uncomfortable new…

Saugata Datta3 min read305
PhantomRPC: New Windows RPC Vulnerability Lets Attackers Escalate Privileges Across All Windows Versions

PhantomRPC: New Windows RPC Vulnerability Lets Attackers Escalate Privileges Across All Windows Versions

PhantomRPC is an architectural weakness in the Windows Remote Procedure Call (RPC) runtime that allows low-privileged processes to escalate to SYSTEM or Administrator by impersonating privileged clients. Disclosed by Kaspersky’s Haidar Kabibo at Black Hat Asia 2026, the flaw stems from how rpcrt4.dll handles connections to unavailable RPC servers: when a privileged process attempts an RPC call to a server that is offline or disabled, the RPC runtime can be…

Saugata Datta4 min read195
Pastebin-Hosted PowerShell Script Hijacks Telegram Sessions: What Happened and How to Respond

Pastebin-Hosted PowerShell Script Hijacks Telegram Sessions: What Happened and How to Respond

Security researchers recently uncovered a PowerShell script posted on Pastebin that was purpose-built to steal Telegram session data from both desktop and web clients. Masquerading as a benign “Windows Telemetry Update,” the script quietly collects host metadata, locates Telegram session stores, compresses them into an archive, and exfiltrates the file to an attacker-controlled Telegram bot. The discovery is notable less for raw sophistication than for the clear window it provides…

Saugata Datta5 min read188
DeepSeek V4: a cheaper, larger LLM that narrows the gap with frontier models

DeepSeek V4: a cheaper, larger LLM that narrows the gap with frontier models

Chinese lab DeepSeek has released preview details for DeepSeek V4, a major update the company says brings its models much closer to so-called frontier systems. The announcement introduces two variants — V4 Flash and V4 Pro — and highlights big increases in scale, a 1 million-token context window, and aggressive pricing that positions the models as lower-cost alternatives to high-end proprietary offerings. While DeepSeek touts strong reasoning and coding results,…

Saugata Datta3 min read268
CISA: Zimbra XSS (CVE-2025-48700) Now Exploited — 10,500+ Servers Vulnerable

CISA: Zimbra XSS (CVE-2025-48700) Now Exploited — 10,500+ Servers Vulnerable

Over 10,000 instances of the Zimbra Collaboration Suite are exposed online and remain vulnerable to an actively exploited cross-site scripting flaw, raising fresh alarms about email server security for governments and businesses alike. The vulnerability, tracked as CVE-2025-48700, is serious because it can be triggered without user interaction and has been confirmed as abused in the wild, prompting action from both vendors and national cybersecurity authorities. What happened Shadowserver, an…

Saugata Datta4 min read305
Hackers Leverage Microsoft Teams to Breach Organizations: Inside UNC6692’s SNOW Campaign

Hackers Leverage Microsoft Teams to Breach Organizations: Inside UNC6692’s SNOW Campaign

In late 2025 and into early 2026, a sophisticated intrusion campaign used the everyday familiarity of Microsoft Teams to turn routine collaboration into a direct route for enterprise compromise. By posing as IT helpdesk staff and exploiting users’ trust in external Teams invitations, the threat group tracked as UNC6692 moved from a simple chat message to full domain-level access—without exploiting a software vulnerability. The result was a carefully staged, cloud-hosted…

Saugata Datta5 min read279
Bitwarden CLI Compromised in Supply Chain Attack via GitHub Actions

Bitwarden CLI Compromised in Supply Chain Attack via GitHub Actions

Socket and other researchers have confirmed that the Bitwarden CLI package published to npm — @bitwarden/cli version 2026.4.0 — was compromised in a supply chain attack that abused a GitHub Action in Bitwarden’s CI/CD pipeline. The malicious release injected a file named bw1.js into the package, exposing tokens, cloud credentials, SSH keys and other sensitive artifacts. While Bitwarden’s Chrome extension, MCP server and other official distribution channels are reported unaffected,…

Saugata Datta4 min read334
OpenAI Debuts Shared Workspace Agents to Automate Team Handoffs

OpenAI Debuts Shared Workspace Agents to Automate Team Handoffs

OpenAI has introduced a new class of ChatGPT tools called shared workspace agents — always-on assistants designed to carry work across systems and through multi-step processes without constant human prompting. Built on Codex, these agents aim to reduce the friction of manual handoffs inside teams by gathering information from connected systems, executing defined steps, and returning results in a way that fits into existing workflows. What workspace agents do Workspace…

Saugata Datta4 min read200
🧰

Free Tools: IP, DNS, SSL

20+ free network and other tools in one place. No signup. Click explore or visit https://technochat.in/tools

Explore