Loading...
Microsoft is revamping the Windows Insider Program to two channels—Experimental (replacing Dev/Canary) and Beta—to simplify testing and address Windows 11 reliability concerns. Beta will deliver features immediately while Experimental uses feature flags you can toggle in Settings; the rollout will happen in phases with specific builds for each channel.
Keep Reading
A Ukrainian national extradited from Ireland to the United States pleaded guilty to conspiracy to commit wire fraud in connection with the Conti ransomware operation, admitting to joining the group in September 2021 and possessing data stolen from eight U.S. victims and four overseas victims. He helped code a loader used in attacks and faces up to 20 years in prison. Conti, linked to TrickBot, targeted more than 1,000 victims and collected over $150 million in ransom before disbanding in 2022.
Microsoft is expanding its data‑loss prevention controls to block the Microsoft 365 Copilot AI assistant from processing confidential Word, Excel and PowerPoint documents regardless of where they are stored—whether on local devices or in SharePoint/OneDrive. The update will be deployed through the Augmentation Loop (AugLoop) Office component between late March and late April 2026, automatically enabling the restriction for organizations that already have DLP policies set to block Copilot from handling sensitivity‑labeled content. This change follows a bug that had allowed Copilot to summarize confidential emails in users’ Sent Items and Drafts folders despite active DLP protections.
Feb 25, 2026
Stay Updated
Subscribe for product analysis, engineering explainers, and practical guides published on TechLogHub.
Get weekly insights, product updates, and launches straight to your inbox.
Microsoft Revamps Windows Insider Program: Experimental and Beta Channels
More than 400 Arch User Repository (AUR) packages were compromised by a threat actor who spoofed a trusted maintainer to push infected updates. The attackers inserted preinstall scripts that download a malicious npm package, atomic-lockfile, whose Linux ELF payload functions as a credential stealer and includes an optional eBPF rootkit to hide activity. The malware targets sensitive data such as GitHub credentials, SSH artifacts, Vault tokens, browser cookies, and data from Slack, Discord, Microsoft Teams, and Telegram, with exfiltration capabilities. Investigations by IFIN and Sonatype detail the campaign, including hijacking orphaned packages and modifying PKGBUILD files to invoke npm during installation. Arch maintainers are removing malicious commits, advising users to audit affected packages, rotate credentials, and consider reinstalling Arch if compromised; a detection script is also recommended.
Google’s new Gemini AI has turned previously harmless public Google API keys into powerful access points for the AI assistant, allowing attackers to read private data and incur high usage costs. TruffleSecurity uncovered nearly 3,000 exposed keys across many sites, including major firms, and warned that these keys can be used to call Gemini’s API and exploit its paid services. After reporting the issue, Google classified it as a privilege escalation flaw, implemented proactive blocking of leaked keys from accessing Gemini, and advised developers to audit and rotate any publicly exposed keys immediately.
Feb 27, 2026
Subscribe to our newsletter for updates.
