Microsoft has stopped automatically installing the Microsoft 365 Copilot app on Windows PCs with M365 apps, after initially planning to roll it out to users by default.

The app was supposed to act as a central hub for Copilot, consolidating AI features across tools like Word, Excel, and PowerPoint into a single location.

However, instead of letting users choose, Microsoft had planned to push it directly onto devices, something many users have opposed in the past.

What changed with Microsoft’s Copilot rollout

Microsoft has now temporarily disabled the automatic installation of the Microsoft 365 Copilot app on eligible devices. This update was confirmed through the company’s Microsoft 365 message center, though no clear reason was shared for the sudden pause.

Earlier, the rollout had already started in December and was expected to expand to more users outside the European Economic Area. Even then, IT admins had the option to opt out, while users in the EEA were excluded by default.

If the rollout resumes in the future, the app will show up in your Start Menu and be enabled automatically. For now, that plan is on hold.

What if the app is already on your PC

If you already have the Microsoft 365 Copilot app installed, nothing changes. Microsoft is not removing it from your system, but you can uninstall it yourself if you want.

Admins can still deploy the app manually using other methods, and Microsoft is expected to share more updates before restarting the rollout.

Microsoft has not explained why it paused the rollout, but the move comes as the company faces growing pressure to be more careful about how it introduces AI features into Windows.

This pause also comes after a few awkward Copilot moments for Microsoft. In one instance, a Windows 11 bug ended up uninstalling the app on its own, which some users actually welcomed.

In another case, Copilot even showed up on LG TVs with no clear way to remove it, highlighting how aggressively Microsoft has pushed the feature.

For now, this is a rare step back because Microsoft is giving you more control over whether Copilot stays on your PC or not.

As immigration became one of the defining focuses of Donald Trump’s second administration, the Department of Homeland Security (DHS) has taken center stage. Under the 2025 One Big Beautiful Bill Act, DHS, which oversees Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), US Citizenship and Immigration Services (USCIS), and several other agencies, received more than $80 billion in additional funding, and in January the agency announced that it had hired more than 12,000 new agents.

Even as cities like Los Angeles and Minneapolis have seen a surge of immigration officers descend upon them, DHS has maintained a high level of opacity around its operations. Officers carrying out raids and arrests are often masked and driving in unmarked cars. As enforcement has pulled in federal law enforcement personnel from across the government, it has become difficult to tell what agency a given officer works for, let alone who they actually are. Though DHS has been combative with the media, ICE agents themselves have been mostly quiet, even if some have mixed feelings about their work and where the agency is headed.

Karl Loftus, an independent journalist who runs the Instagram account @deadcrab_films, started a new project following the immigration surge in Minneapolis called Confessions of an ICE Agent. There, he publishes interviews with people who work in immigration enforcement across DHS. This includes agents and officers with the two main divisions of ICE—Homeland Security Investigations and Enforcement and Removal Operations—as well as CBP officers. He offers them anonymity and a place to speak their minds outside the structures of traditional media, and in return gets a glimpse of what the people inside the agency are experiencing, creating an archive of this moment in its history.

In one post, a biracial agent speaking shortly after Trump announced that he would be replacing DHS Secretary Kristi Noem told Loftus he believed Noem was a “DEI” hire. In another, an HSI agent called the people leading the US government “imbeciles,” saying they were “disgusted by nearly all of them.” Another HSI agent expressed concerns about DHS colleagues violating the law, and complained of having to pause investigation into child sexual abuse cases to focus on immigration work. “If they gave child exploitation cases a fraction of the attention, funding, resources, personnel, analytical support, etc. that they’re now giving immigration enforcement, we could do so much good,” they said.

WIRED spoke to Loftus about the public response to a polarizing topic, how he vets his sources, and the pressure to pick a side. A DHS spokesperson responded to WIRED’s request for comment saying that they cannot verify anonymous interviews but that DHS and its Homeland Security Investigations unit “is not slowing down and remains committed to all aspects of its mission, leveraging a whole-of-government approach to address threats to public safety and national security.”

This conversation has been edited for length and clarity.

WIRED: Before this project, your account mostly focused on things like disaster recovery after Hurricane Helene and similar topics. How did you start working on ICE?

Karl Loftus: In 2018 I was a volunteer in North Carolina during Hurricane Florence. I was there during the hurricane for four days doing search and rescue. That kind of started my passion for disaster response. I had been in Jamaica for seven weeks responding to Hurricane Melissa, working with a handful of different NGOs. I worked with Global Empowerment Mission repairing roofs of hospitals and medical centers to try to get the medical infrastructure back on track. I worked with World Central Kitchen. I was there documenting. I had planned to go to Wisconsin for the holidays, which is where I’m from, to visit some family, but I ended up staying in Jamaica. In early January, I finally made it up to the Midwest to see some family, and that’s when the Renee Good shooting happened. I was like, “Man, I know shit’s about to go insane the following day, and there’s going to be protests and riots and all this stuff.” So I decided to make the trip to Minneapolis.

A McDonald’s in the Chinese megacity of Shanghai is testing humanoid robots in roles usually the preserve of human workers, with other types of robots also let loose inside the restaurant to greet and entertain diners.

Truth be told, the robots don’t look particularly advanced, but a video (below) showing them in action does hint at a future where bipedal bots and other machines handle routine tasks at fast food restaurants, from welcoming customers and taking orders to delivering food and cleaning the floor.

The McDonald’s trial, using robots supplied by Chinese firm Keenon Robotics, comes at a time of economic contradiction in China, where businesses in some sectors are struggling to hire even as millions of young people face difficulty finding work.

It’s this tension that makes the McDonald’s trial stand out, with restaurant operators interested in deploying a reliable, potentially low-cost workforce in a strategy that raises fears of displacement among human workers in the service sector, which up to now has been a popular route into the workforce.

The reality, however, is more complicated. China’s workforce is shrinking as the population ages, while many younger job seekers are reluctant to take on low-paid, repetitive work. In that case, robot technology could be used to fill gaps rather than simply replace people. Still, the presence of robots in such a visible, everyday setting highlights how quickly that balance could shift.

While it could be a while before McDonald’s deploys humanoid robots in a more meaningful way, adding them to restaurants as greeters and entertainers could potentially draw curious diners, especially families with kids who might want to interact with the machines while waiting for their meal to arrive.

Even if the fast food giant eventually wants robots to run its restaurants, such a scenario is almost certainly many years away, simply because the technology isn’t yet up to it. What feels more likely, at least in the short term, is a hybrid setup where human workers handle the majority of tasks while the robots take on more basic, customer-facing roles out front.

ConnectWise is warning ScreenConnect customers of a cryptographic signature verification vulnerability that could lead to unauthorized access and privilege escalation.

The flaw affects ScreenConnect versions before 26.1. It is tracked as CVE-2026-3564 and received a critical severity score.

ScreenConnect is a remote access platform typically used by managed service providers (MSPs), IT departments, and support teams. It can be either cloud-hosted by ConnectWise or on-premise on the customer’s server.

An attacker could exploit the security issue to extract and use the ASP.NET machine keys for unauthorized session authentication.

“If the machine key material for a ScreenConnect instance is disclosed, a threat actor may be able to generate or modify protected values in ways that may be accepted by the instance as valid,” reads the vendor’s advisory.

“This can result in unauthorized access and unauthorized actions within ScreenConnect.”

The vendor addressed this by adding stronger protection for machine keys, including encrypted storage and improved handling starting ScreenConnect version 26.1.

Cloud users have been automatically moved to the safe version, but system administrators managing on-premises deployments must upgrade to version 26.1 as soon as possible.

ConnectWise also stated that researchers observed attempts to abuse disclosed ASP.NET machine key material in the wild, so the risk from CVE-2026-3564 is tangible right now.

However, the vendor told BleepingComputer that it has no evidence of active exploitation in the wild as of writing, and therefore has no indicators of compromise (IoCs) to share with defenders.

“We do not have evidence that this specific vulnerability (CVE-2026-3564) was exploited in ConnectWise-hosted ScreenConnect, so we do not have any confirmed IOCs to share,” stated ConnectWise to BleepingComputer.

“We encourage any researchers who believe they have identified active exploitation to engage in responsible disclosure so findings can be validated and addressed appropriately.”

However, there are claims that the issue has been actively exploited by Chinese hackers for years, but it is unclear if the same security flaw was leveraged.

There have been in the past attacks from nation-state hackers that exploited CVE-2025-3935 to steal the secret machine keys used by a ScreenConnect server.

Apart from upgrading to ScreenConnect version 26.1, the software vendor also recommends tightening access to configuration files and secrets, checking logs for unusual authentication activity, protecting backups and old data snapshots, and keeping extensions up to date.

Malware is getting smarter. The Red Report 2026 reveals how new threats use math to detect sandboxes and hide in plain sight.

Download our analysis of 1.1 million malicious samples to uncover the top 10 techniques and see if your security stack is blinded.

Advertisement

Download The Report

If you’re working with surface mount components, you’re likely going to want a reflow plate at some point. [Vitaly] was in need of just such a tool, and thus whipped up a compact reflow plate that is conveniently powered via USB-C. 

This reflow rig is designed for smaller work, with a working area of 80 mm x 70 mm. There are two options for the heating element—either a metal core PCB-based heater, or a metal ceramic heater. The former is good for working with Sn42Bi58 solder paste at 138 C, according to [Vitaly], while the latter will happily handle Sn63Pb37 at 183 C if the dirty stuff is more your jam.

Running the show is an ESP32-C3-WROOM, which serves up a web-based control panel over Bluetooth for setting the heating profiles. Using Bluetooth over WiFi might seem like an odd choice at first, but it means you don’t have to add the hot plate to the local wireless network to access it, handy if you’re on the move. It’s also worth noting that you can’t run this off any old USB charger—you’ll need one compatible with USB Power Delivery (PD) that can deliver at least 100 watts.

If you’re needing to whip up small boards with regularity, a hotplate like this one can really come in handy. Files are on GitHub for those eager to build their own.

This isn’t the first time we’ve seen USB-C powering a small reflow plate. Of course, if you make your PCBs self heating, you can sidestep all that entirely.

The Information reported that an AI agent within Meta took unauthorized action that led to an employee creating a security breach at the social company last week. According to the publication, an employee used an in-house agentic AI to analyze a query from a second employee on an internal forum. The AI agent posted a response to the second employee with advice even though the first person did not direct it to do so.

The second employee took the agent’s recommended action, sparking a domino effect that led to some engineers having access to Meta systems that they shouldn’t have permission to see. A representative from the company confirmed the incident to The Information and said that “no user data was mishandled.” Meta’s internal report indicated that there were unspecified additional issues that led to the breach. A source said that there was no evidence that anyone took advantage of the sudden access or that the data was made public during the two hours when the security breach was active. However, that may be the result of dumb luck more than anything else.

Many tech leaders and companies have touted the benefits of artificial intelligence, this is just the latest incident where human employees have lost control over an AI agent. Amazon Web Services experienced a 13-hour outage earlier this year that also (apparently coincidentally) involved its Kiro agentic AI coding tool. Moltbook, the social network for AI agents recently acquired by Meta, had a security flaw that exposed user information thanks to an oversight in the vibe-coded platform.

During a Senate hearing, FBI Director Kash Patel confirmed that his agency has bought information that could be used to track individuals’ movement and location. “We do purchase commercially available information that’s consistent with the Constitution and the laws under the Electronic Communications Privacy Act, and it has led to some valuable intelligence for us,” he said.

Law enforcement is required to obtain a warrant in order to get location data from cell service providers following the Carpenter v United States ruling from 2018. But why bother with all that hassle when they can just buy the information from the open market?

“Doing that without a warrant is an outrageous end run around the Fourth Amendment, it’s particularly dangerous given the use of artificial intelligence to comb through massive amounts of private information,” Sen. Ron Wyden, (D-Ore.) said during the Intelligence Committee hearing. Wyden is one of several lawmakers pushing for an overhaul of when and how the government can obtain citizens’ personal information.

It’s an overhaul that’s badly needed. Patel already has a history of dubious use of government resources, such as ordering SWAT protections for his girlfriend and somehow horning in on men’s hockey victory celebrations at the recent winter Olympics, so one would hope he’s not also stretching the limits of the few privacy protections that do exist. Then outside the FBI, we have the Department of Homeland Security being sued for illegally tracking immigration raid protestors and the Pentagon’s labeling of Anthropic as a supply-chain risk after the AI company refused to let its products be used for mass surveillance of Americans.

Gaming is growing every day, and a big part of that can be attributed to Tencent Games, which has been behind games like BGMI. Now, MoreFun Studios, a subsidiary of Tencent, has launched the Closed Beta Test (CBT) for its mobile tactical shooter Arena Breakout in India. Players can now download the game’s beta version on Android and iOS and experience hardcore FPS gameplay ahead of its official launch.

What is Arena Breakout?

Arena Breakout is a hardcore tactical first-person shooter in which survival and strategy play a key role. Unlike traditional mobile shooters, the game focuses heavily on realistic combat, inventory management, and extraction-based gameplay.

Players enter the war-torn region of Kamona, a fictional battlefield devastated by civil war. The objective is simple but challenging: explore the combat zone, collect valuable loot, and reach the extraction point safely.

However, players must survive encounters with enemy combatants and other players along the way. Every item carried into battle can be lost if the mission fails, making each run a high-risk, high-reward experience. Arena Breakout has already gained significant global traction, with the developers claiming over 100 million downloads.

Extensive Weapon Customization

Another highlight of Arena Breakout is its Ultimate Gunsmithing System, which allows players to build and customize weapons in great detail. The system includes:

• 700+ weapon accessories
• 10 modification slots
• Extensive gun customization options

Players can modify weapons to suit different playstyles, whether that means building stealth-focused loadouts or heavily armored combat setups.

How To Access the Closed Beta?

If you can’t wait to get your hands on Arena Breakout, the closed beta test is live in India. You can download it on your phone by clicking the link here. Just remember that since it’s a closed beta, there may be random glitches or bugs. So, keep an eye out for those.