AI Worms: How Copilot for Word Propagates Hidden Attacks Across Documents
Maliciously crafted documents can turn Microsoft Copilot into a self-propagating AI worm that silently alters and infects internal document workflows.
Microsoft
News, strategy, and developments related to Microsoft Corporation, including its products, partnerships, and business decisions.
Reading List
Microsoft Launches MAI-Cyber-1-Flash: High-Performance AI Security at Half the Cost
Microsoft has launched a new AI-driven security model and agentic harness that outperforms competitors in vulnerability remediation while cutting costs by 50%.
Microsoft AI and Azure Open-Source Tools Hacked in Supply Chain Attack
536
Microsoft is investigating a supply chain attack where hackers compromised over 70 open-source repositories to steal passwords from AI and cloud developers.
VSCode Webview Flaw Enables GitHub Token Theft via github.dev
658
A flaw in VSCode's keyboard event handling allows malicious repositories to steal GitHub tokens on github.dev by automatically installing rogue extensions.
VS Code Sparks Outrage by Defaulting to AI Co-Author Attribution
1513
VS Code now defaults to adding 'Co-authored-by: Copilot' to Git commits, sparking a developer backlash over privacy and commit 'vandalism.'
VibeVoice: Microsoft's Open-Source Long-Form Voice AI
386
VibeVoice is an open-source Microsoft framework designed for high-efficiency, long-form speech recognition and multi-speaker text-to-speech synthesis.
Microsoft Ends Exclusivity and Revenue Sharing with OpenAI
976
Microsoft is ending revenue sharing and exclusivity in its partnership with OpenAI to adapt to rapid AI innovation.