South Africa's domain authority wants a registry operator for .co.za, .web.za, .net.za and .org.za. Bidders must join an online briefing on 20 November; proposals close at 12:00 SAST on 14 December.
Microsoft 365 companion apps retire by 16 December, and already get no security fixes
EditorialBy TrustList Editorial
Microsoft retires the Calendar, People and Files companion apps before 16 December 2026 and has stopped all updates, security fixes included. Admins must remove them, and delete any Intune assignments, or Intune reinstalls them.
About Microsoft 365 companion apps retire by 16 December, and already get no security fixes
Microsoft 365 companion apps retire by 16 December, and already get no security fixes
22 September 2026: Microsoft will retire three Microsoft 365 companion apps for Windows 11 on 16 December 2026: Calendar, People and Files. Its retirement page, published on 17 September, says the apps will be fully retired and non-functional before that date, and may go sooner depending on when each organisation removes them.
The part that cannot wait until December
The date is in December, but the risk starts now. Microsoft's page says updates and fixes, security fixes included, are no longer being provided for the companion apps. If a problem needs a fix during the retirement period, Microsoft's answer is to uninstall the apps. In practice they are unsupported software already, on every device where they are installed.
No data is at risk from removing them. Files, calendar events and contacts live in Microsoft 365 services, not in the apps, and Microsoft says nothing is deleted by the retirement. For calendar and people information it points users to Outlook and Teams. For files, it points to Windows Search, File Explorer, SharePoint and OneDrive.
How the apps got onto your devices
Microsoft lists three routes, and each needs its own clean-up:
- Automatically, through Microsoft 365 Apps updates on eligible Windows 11 devices, unless an admin opted out. Microsoft has stopped installing them this way. But it will not clear the "Enable automatic installation of Microsoft 365 companion apps" setting in the Microsoft 365 Apps admin center, and recommends admins clear it themselves under Device Configuration, Modern App settings.
- Through Microsoft Intune or another software-distribution tool. Any Required or Available assignment for the companion apps' Win32 app entry must be deleted. Otherwise Intune reinstalls the apps after they are removed, which Microsoft lists as the usual reason they reappear.
- Directly by users. On devices the organisation does not manage, users have to remove the apps themselves.
What to do this month
- Delete the Intune assignments for the companion apps entry before you uninstall anything.
- Clear the auto-install setting in the Microsoft 365 Apps admin center.
- Uninstall from managed devices. Removing one companion app removes all three, which makes a single uninstall action enough.
- Tell users on unmanaged devices to remove them under Windows Settings, Apps, Installed apps, by searching for Microsoft 365 companions.
- Point people at the replacements before the apps disappear, so nobody loses a workflow they relied on.
Sources
Categories & features
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
You may be interested in
A malicious or impersonated server can overflow the client's buffer through a large-object read (CVE-2026-120057), and untrusted SQL text with ODBC escapes can overflow the stack (CVE-2026-120061). Both rate 7.5.
CVE-2026-107441 lets an unauthenticated attacker on the LAN run OS commands on ten GS1900 switch models; CVE-2026-76955 lets a LAN attacker gain privileges on about 40 APs, FWA7 units and the USG LITE 60AX.
CVE-2026-58115, rated CVSS 10.0 and fixed in Industrial OS V4.3.4.1 in August, was used on 30 October to plant a Linux bot through the unauthenticated Node-RED HTTP interface.
The Jena company, founded in 2017 and sold through more than 250 partners, takes a double-digit million sum and makes Verdane its largest shareholder. The plan is MSP sales, SIEM and MDR, and buying firms abroad.
The most severe flaw lets an attacker run code with no user interaction, and a critical bug in WAP Push SMS handling, with a public proof of concept, can disrupt calls. Patch level 2026-11-05 covers everything.
Researchers found only about 24 random bits in the serial numbers of TWCA's CA certificates, against the 64 the CA/Browser Forum requires. Customers must install new certificates and chains before 6 November.
Rollout starts on 1 February 2027 for most users and 1 July 2027 for Global Administrators and guests, each with a 50-day grace period. Passkeys alone will not satisfy self-service password reset.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More CybersecurityThe ranking for this subject
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.