Ryan Roslansky, Microsoft's Office and Teams chief, is leaving after nearly 18 years, a week after the company announced its new Copilot. His teams now report to Charles Lamanna in the Copilot, Agents, and Platform organization, so Office is run from inside Microsoft's Copilot group.
Perspective Coverage
4 publishers
- Builder
- Builder 18%
- Operator
- Operator 50%
- Investor
- Investor 32%
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap+10
- Incentives40
- Confidence70
OpenAI's Dots agents, arriving in a business base of more than 35 million weekly users, must get a user's sign-off before changing a password or deleting data. Permissions are adjustable settings, so each team deploying an always-on Dot sets its own limits.
Reality
- Evidence40
- Adoption12
- Hype gap+35
- Incentives70
- Confidence45
ServiceNow says a small team with a founder-like mandate built Flow, its AI service desk for Slack and Teams, in three months. For IT teams whose staff already work in chat, the question is whether a desk with no setup project will still fit once request volume and complexity grow.
Reality
- Evidence50
- Adoption12
- Hype gap+35
- Incentives75
- Confidence55
Zscaler ThreatLabz logged 20.1% fewer ransomware payments in the year to March 2026, worth $327.8M in total, while the average payment rose 5.3% to $431,995. Leak-site listings fell just 3% over the same period, so the decline is in how many victims pay.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+25
- Incentives80
- Confidence50
OpenAI is letting enterprise workspace admins decide whether staff get Dots, its always-on ChatGPT agents that can connect to more than 4,000 apps. Whoever turns on the beta approves software that keeps working while nobody watches, under permission rules each employee writes for their own Dot.
Reality
- Evidence40
- Adoption12
- Hype gap+15
- Incentives55
- Confidence38
OpenAI opened the plugin system behind ChatGPT's own features to outside developers at DevDay and launched a 32-partner enterprise marketplace. For teams that build internal tools, ChatGPT is now both a place their integrations can run and a product that competes with them.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+30
- Incentives55
- Confidence40
OpenAI's Dots give ChatGPT persistent agents that each run on an isolated cloud computer and keep working after the user leaves the chat. Teams now have to sort which errands can run unwatched and which must stop for a person's approval.
Reality
- Evidence30
- Adoption
- Insufficient
- Hype gap+30
- Incentives55
- Confidence40
OpenAI is halving the usage in its $200 ChatGPT Pro plan from 30 October and adding a $500 plan with its fastest speed. Before buying Pro seats for Space, teams should check who used more than ten times the Plus allowance.
Reality
- Evidence55
- Adoption35
- Hype gap+5
- Incentives60
- Confidence60
OpenAI's new Dots give ChatGPT subscribers an always-on agent that works through more than 4,000 connected apps. Whoever runs those accounts now sets the rules for which actions a Dot takes on its own and which have to wait for a person to say yes.
Reality
- Evidence35
- Adoption10
- Hype gap+30
- Incentives65
- Confidence40
Ontinue says the Python implant takes tasking from SharePoint dead drops over Graph API, relays interactive sessions through Teams TURN, and moves all of it through the victim's own headless Edge.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+20
- Incentives40
- Confidence60
Google outbid Mercor by $2.5 million for a dead airline's Teams messages, calendars and codebase. Leaders need a data-disposition position before the wind-down, not during it.
Reality
- Evidence68
- Adoption30
- Hype gap+22
- Incentives55
- Confidence62
Disclosures doubled year over year while actually-exploited vulnerabilities rose 8%. The arithmetic retires patch-everything SLAs and leaves exploitability triage as the defensible option.
Perspective Coverage
3 publishers
- Builder
- Builder 12%
- Operator
- Operator 76%
- Investor
- Investor 12%
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+30
- Incentives70
- Confidence60
Unit 42 reports endpoint alerts tied to collaboration tools more than quadrupled in 12 months, with 99% linked to chat phishing. Most controls still watch email and logins, not authenticated sessions.
Reality
- Evidence35
- Adoption
- Insufficient
- Hype gap+20
- Incentives80
- Confidence50
Expel's teardown of a loader first compiled around 28 July 2026 puts the whole delivery chain outside email, and says its module hashes change with every infection.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+5
- Incentives
- Insufficient
- Confidence60
Unit 42 says the crew reached more than 150 employees at ten or more companies without a single software exploit, which puts Teams federation policy and NTLM relay hardening in scope and leaves the endpoint downstream.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 65%
- Investor
- Investor 7%
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+20
- Incentives70
- Confidence60
According to Microsoft Threat Intelligence, every stage after the consent prompt runs on software the environment already trusts, which puts the choke point on Teams federation policy and remote-support install rights.
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+10
- Incentives50
- Confidence65
The OAuth device authorization grant was built for smart TVs and printers. Kits such as EvilTokens use it to get victims to approve an attacker's sign-in on a page that really is Microsoft's, MFA included.
Reality
- Evidence55
- Adoption20
- Hype gap+12
- Incentives70
- Confidence55
A solo developer's live-caption extension needs an offscreen document because MV3's service worker has no Web Audio, and his own measurements price what he paid in seconds of delay to cut the hourly bill 17 times.
Reality
- Evidence58
- Adoption15
- Hype gap+8
- Incentives45
- Confidence55
The device code phishing cluster Microsoft disclosed in February 2025 is now assessed as an initial access arm of Midnight Blizzard. The sign-in flow the campaign abused works as designed, so the remedy is configuration.
Reality
- Evidence60
- Adoption55
- Hype gap−12
- Incentives72
- Confidence58
Justin Johnsen has been a forward-deployed engineer at KPMG for about a year. His account of one engagement puts months of requirements and context work ahead of a build that took roughly a month, then coaching the client's own team.
Reality
- Evidence30
- Adoption25
- Hype gap+15
- Incentives65
- Confidence45
Earlier coverage
- Google won 100 million Spirit emails and 500 million Teams chats for $10 million
Security · September 19, 2026 · 1 publisher
- A plastic surgeon rewrote her risk talk for male patients arriving with app screenshots
Science · September 18, 2026 · 1 publisher
- Microsoft opens the Teams weaponizable-file blocklist to admin edits in November 2026
Security · September 18, 2026 · 1 publisher
- Springshot asks a court to carve its own records out of Google's $10m Spirit data purchase
Product · September 18, 2026 · 1 publisher
- Storm-2945 splits one hospitality network redirect into cloud identity access or endpoint compromise
Security · September 17, 2026 · 1 publisher
- MRH Trowe ran 400 employees on self-service agents for about $14 a seat in month one
Build · September 17, 2026 · 1 publisher
- N0va captures refresh tokens from sign-ins the identity provider itself approved
Security · September 16, 2026 · 1 publisher
- Pipedrive makes a rep approve every field Nova wants to write into the CRM
Product · September 16, 2026 · 1 publisher
- SaaStr's counterfactual Slack works out to 6 to 8 times a triangulated revenue base
Invest · September 15, 2026 · 1 publisher
- Windows 365 flags a Cloud PC Provisioned before Intune has installed Teams
Build · September 13, 2026 · 1 publisher
- Fake helpdesk calls use the passkey rollout as the pretext for Microsoft 365 intrusions
Leadership · September 13, 2026 · 1 publisher
- Microsoft's August security update kept Teams off freshly imaged ARM Surfaces for 28 days
Security · September 11, 2026 · 1 publisher
- Fake IT callers register their own MFA method under the Microsoft 365 identities they phish
Security · September 10, 2026 · 1 publisher
- Microsoft traces four months of Graph-based mail theft to fake passkey helpdesk calls
Security · September 9, 2026 · 1 publisher
- Microsoft retracts its root-cause explanation for Teams Mac call failures
Security · September 4, 2026 · 1 publisher
- Microsoft's 10-cent transcription hour undercuts its own prior pricing, requiring rivals at the old rate to find 3.6 times the volume
Invest · September 4, 2026 · 1 publisher
- Dell puts aluminium and a 27-hour battery claim into the student laptop tier
Product · September 2, 2026 · 4 publishers
- Teams will hide external-sender QR codes behind a user click from October 2026
Security · September 4, 2026 · 1 publisher
- Atira raises $17.5 million against a $128 billion pile of quoting labor
Invest · September 3, 2026 · 2 publishers
- Xbox laid off staff on a cameras-off call, as unions bargain over severance
Leadership · September 1, 2026 · 1 publisher
- Spring Ring stands up an onmicrosoft.com tenant to place the IT help-desk call
Build · August 31, 2026 · 1 publisher
- Scam victims in China are logging into Teams accounts their scammers control
Product · August 28, 2026 · 1 publisher
- Off-channel enforcement moves from a $2.3bn SEC docket into FINRA's unpublished exam files
Invest · August 28, 2026 · 1 publisher
- Plaud's cellular earbuds hand the recording-consent problem to employers
Product · August 27, 2026 · 4 publishers
- Google bid $10m for a dead airline's inbox. That is now the comp for your internal records
Leadership · August 24, 2026 · 1 publisher
- SynkLoader: the Teams help-desk lure now ships with a reverse proxy attached
Build · August 21, 2026 · 1 publisher
- Slack Code makes the chat window a coding surface, and a platform call for engineering leaders
Leadership · August 20, 2026 · 1 publisher
- Microsoft puts AI agents in Entra, which makes agent sprawl an identity team problem
Leadership · August 20, 2026 · 1 publisher
- Agent-to-agent email is already here. The disclosure rule is not.
Product · August 17, 2026 · 1 publisher