Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-01 · source-backed
BleepingComputer confirmed Copilot summarized confidential emails despite DLP policies. UK NHS impacted. DLP was designed for human access patterns, not AI agents that index everything they can reach.
Each link below shares sources, entities, or timing with this story.
CVE-2026-27896 (MCP Go SDK): High-severity interpretation conflict in the *official* MCP Go SDK (maintained by Anthropic + Google). Go's encoding/json performs case-insensitive matching — attackers bypass WAFs by sending JSON-RPC messages with non-standard casing the SDK accep...
Microsoft's March 2026 Patch Tuesday (79 flaws, 2 zero-days) includes a Critical vulnerability where Excel's Copilot Agent mode silently exfiltrates data with zero user interaction. An attacker crafts a malicious document; when opened, the Copilot Agent triggers network egress...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
MAI-Code-1-Flash, a 5B-parameter coding model, is in GitHub Copilot and VS Code, and Microsoft says it beats Claude Haiku 4.5 across core coding benchmarks, +16 points on SWE-Bench Pro at 51.2% versus 35.2%, using up to 60% fewer tokens. MAI-Thinking-1, a 35B-active MoE with a...
In its Q3 FY2026 earnings ($82.9B revenue, +18%), Microsoft disclosed something more important than the revenue number: a structural shift in how software gets sold. The company's AI business crossed $37B annual run rate, up 123% year-over-year. But the real signal is the pric...
A single default flip. That's all it took to misattribute millions of commits worldwide. VS Code 1.118 changed git.addAICoAuthor from off to all, injecting a "Co-Authored-by: GitHub Copilot" trailer into every commit. Even if you'd never enabled Copilot. Even if you'd explicit...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.