26 mentions · 25 chunks · 21 episodes
...ntext Collapse, Part 3 - AI Worming through Word. This LLM worm was reported to Microsoft months ago, but it's not possible to patch. SharedRoot; Escaping the Claude Cowork sandbox. "Untrusted content in a Claude Cowork session can escape ...
...tic IDE. When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server. Rein's Agent Breakers Research Team Discovers Critical Vulnerabilities in Top U.S. Retailer's AI Shopping Agent "Rein chai...
...ight out from underneath them." If you told me 15 years ago I'd be aligned with Microsoft's worldview, I'd have told you you were crazy!
...n "Varonis Threat Labs discovered SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that allows an attacker to steal sensitive data — MFA codes, email messages, meeting details, and private organizational files...
...t Roundup. Securing CI/CD in an agentic world: Claude Code Github action case. "Microsoft Threat Intelligence discovered that Anthropic's Claude Code GitHub Action could expose CI/CD workflow secrets when AI agents process untrusted GitHub...
...ount: '"You can run OpenClaw inside your company now." Annoucing our work with @Microsoft to bring OpenClaw to the Microsoft and Windows ecosystems. Claws now work securly in the enterprise.' There's something so perfect about the misspell...
... user's knowledge." Zero-Click Agentic AI Attack Bypasses Human Oversight. "The Microsoft AI Red Team's June 4, 2026 update to its 'Taxonomy of Failure Modes in Agentic AI Systems' (v2.0) reports that zero-click attack chains can bypass hu...
This week in the Wild West Roundup: Microsoft Copilot Cowork Exfiltrates Files. ChatGPPhish: ChatGPT blindly trusts browser content, turning the page into a payload. Ars Technica: Fed up with vib...
...ore. Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover. Microsoft: When prompts become shells: RCE vulnerabilities in AI agent frameworks. Malicious OpenClaw DeepSeek Skill Exploits Agentic AI Workflows to Deliver R...
...egister: Agents hooked into GitHub can steal creds – but Anthropic, Google, and Microsoft haven't warned users.
...gravity. hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far Also covered in this Twitter post: trust your inputs, lose your repo. Malicious OpenClaw Skills Used to Distri...
...rself! Good luck!" Superhuman AI Exfiltrates Emails. Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data
... it's entirely in the domain of corporations. Imagine how insane it would be if Microsoft had a nuclear weapons department. That would obviously be bad! The chance of society rushing forward recklessly on this is 100%. Musk: "I didn't get ...
...lt an AI Prompt Injection Attack Demo : Here's What Every Developer Should Know Microsoft 365 Copilot allows arbitrary data exfiltration via Mermaid diagrams. Google Gemini's own demo breaks Google's own captchas without asking the user fo...
...t. A massively profitable business when no one else was doing anything. Not the Microsoft style "do the same crap as everyone else but in our suite" but "rethink what is possible, do only what no one else could even dream of doing but ever...
...n the new one, not despite their previous success, but because of it. Nokia and Microsoft pursued the wrong strategies because they thought they had advantages that ultimately didn't matter in the face of a new paradigm."
Writely (the precursor to Google Docs) didn't compete with Microsoft Word on features. It changed the battleground fundamentally. The killer feature was collaboration in the cloud. A classic disruption story.
AI is to Apple as the internet was to Microsoft. From Strachery this week: "Everyone used the Internet on Windows PCs, but it was the Internet that created the conditions for the paradigm that woul...
...at trying to keep AI in a box in its current paradigm will one day be seen like Microsoft trying to keep the Internet locked to its devices: fruitless to start, and fatal in the end."
Games have a higher bar to meet than utility software. You have to keep using Microsoft Word even if you don't like it, because it is a means to an end. The end might be for example turning in a report the boss asked for. You will slog t...