TechCapsules

Microsoft is killing Office 2021 in October to push you onto Microsoft…

Microsoft has announced that it will end support for Office 2021 on October 13, 2026, after which users will no longer receive patches, fixes, or security updates. This move is part of Microsoft's effort to push users towards its subscription-based productivity offerings, such as Microsoft 365. Users who choose to stay with Office 2021 can take steps to mitigate potential security risks, including keeping the software offline, practicing safe document handling, and keeping Windows Security updated.

💡 Microsoft's decision to end support for Office 2021 highlights the company's increasing reliance on subscription-based models, which may not appeal to users who value the stability and predictability of a one-time purchase. As a result, users who choose to stay with Office 2021 may be forced to adopt workarounds to maintain security and functionality.

GitHub Unveils Qubot: AI-Powered Analytics Agent

GitHub has introduced Qubot, an internal analytics tool powered by its Copilot AI, to simplify access to data for its employees. Qubot allows users to query GitHub's massive data warehouse in plain language and receive actionable insights in seconds. The tool is designed to eliminate the challenge of providing self-serve analytics at scale and focuses on exploratory questions. Qubot's architecture includes a user interface, context layer, and query engine, and it is accessible through multiple channels, including Slack and VS Code. The tool has seen widespread adoption across GitHub since its deployment, streamlining data analysis for employees.

💡 Qubot's ability to provide instant insights enables GitHub employees to make data-driven decisions quickly, driving business efficiency. By automating complex data queries, Qubot frees up staff to focus on higher-value tasks.

Microsoft is killing the Microsoft account lock-in across products, Windows 11 may…

Microsoft is loosening its grip on the Microsoft account requirement across its products. Edge will allow users to sign in with a Google account, a feature currently in development and set to roll out in July 2026. This change may extend to Windows 11, which has required a Microsoft account for setup. The move marks a shift in Microsoft's stance, having previously pushed for Microsoft account usage. The new Edge feature will enable users to sign in with their Google account, syncing data without needing a Microsoft account. This change aims to lower the barrier for Chrome users to switch to Edge.

💡 By allowing Google account sign-ins, Microsoft is directly targeting Chrome's vast user base, making it easier for them to switch to Edge. This move enables users to leverage Microsoft's ecosystem without being locked into a Microsoft account.

Microsoft confirms Recycle Bin bug across all versions of Windows

Microsoft has confirmed a bug affecting all supported versions of Windows, including client and server, following the June Patch Tuesday update. The issue causes the Recycle Bin to display the internal file name instead of the actual name when attempting to delete an item. This unexpected behavior affects all versions of Windows, with Microsoft working on a solution to be released in a future update. Commercial customers can deploy a workaround, but details are available through Microsoft Support for Business.

💡 The Recycle Bin bug highlights Microsoft's struggle to balance security patches with user experience, raising questions about the company's testing procedures and the impact on its reputation.

Microsoft finally admits its default Windows 11 25H2, 24H2 action broke key…

Microsoft has acknowledged a compatibility issue with its default Windows 11 25H2 and 24H2 settings, which switched to JScript9Legacy to improve security. The change caused problems with older dependent apps and web-based components that relied on legacy behavior. Microsoft confirmed the issue stems from its move away from the older jscript9.dll engine in favor of jscript9legacy.dll, which changes how JScript handles execution context. The company has published a support article detailing the problem and provided a Registry setting to enable persistent JScript execution context.

GitHub Malicious Repositories: 10,000 Trojan Clones Evade Detection for Over a Year

A security researcher has discovered that approximately 10,000 GitHub repositories have been distributing Trojan malware to developers for over a year without being flagged or removed by the platform's automated security systems. The malicious repositories were created by cloning legitimate projects and adding a link to a downloadable ZIP archive containing a Trojan payload. The attackers exploited GitHub's trust signals and anomaly-detection architecture, making it difficult for automated systems to detect the long-running threats. The researcher released an open-source detection tool and a list of the affected repositories after GitHub's security team failed to respond to prior disclosures.

💡 The widespread evasion of GitHub's security systems highlights a critical vulnerability in the platform's architecture, allowing malicious actors to quietly distribute malware to developers for extended periods. This structural gap underscores the need for more robust anomaly-detection mechanisms to prevent similar campaigns in the future.