Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-13 · source-backed
Microsoft's security team disclosed that before v2.1.128, a single malicious issue or comment could exfiltrate CI/CD secrets by reading unsanitized environment variables. Anthropic patched it. If you run the action on untrusted input, pin to >=2.1.128 right now, and adopt the harder default it implies: treat anything an agent can read in your CI environment as already compromised. Scope secrets, don't dump them into env, and assume the agent's context is hostile-readable.
Each link below shares sources, entities, or timing with this story.
Microsoft supports Agent Skills / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft supports Agent Skills); both cover Anthropic, Microsoft; overlapping topics (agent, already, anthropic, claude, code).
Microsoft released Copilot / Shared entity: Anthropic / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft released Copilot); both cover Anthropic; overlapping topics (action, agent, anthropic, claude, code).
Microsoft competes with OpenAI / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft competes with OpenAI); both cover Anthropic, Microsoft; overlapping topics (agent, anthropic).
Microsoft supports MCP / Shared entity: Anthropic / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover Anthropic; overlapping topics (agent, anthropic, claude, code, context).
Microsoft criticizes Claude Code / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft criticizes Claude Code); both cover Anthropic, Microsoft; overlapping topics (agent, claude, code).
Microsoft supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover Anthropic, Microsoft; overlapping topics (action, agent, claude).
Microsoft criticizes Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft criticizes Claude Code); both cover Anthropic, Microsoft; overlapping topics (agent, anthropic, claude).
Microsoft competes with OpenAI / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft competes with OpenAI); both cover Anthropic, Microsoft; overlapping topics (agent, already, anthropic).