Microsoft’s latest Patch Tuesday fixed a zero-day vulnerability disclosed by researcher Nightmare Eclipse, as the two remain locked in a heated public dispute over responsible disclosure practices. The same patch bundle also addressed another flaw originally thought fixed six years ago.
Microsoft released an investigative playbook for security teams to efficiently analyze incidents involving Copilot and Azure AI. It provides a structured, telemetry-driven method to determine what AI actions occurred, what data was involved, and whether it was a threat.
Microsoft removed 73 GitHub repositories after the Miasma supply-chain worm compromised them to distribute password-stealing malware. All repos are restored, but the worm’s targeting of AI coding tools signals a new phase in supply-chain attacks.