Loading story…
Microsoft released a unified, business-focused Copilot experience organized into Home, Code, and Autopilot. Home consolidates workplace content and Microsoft 365 services; Code uses GitHub Copilot technology to support prompt-driven application development within the sandboxed Microsoft Copilot Managed Runtime; and Autopilot—formerly Scout—provides semi-autonomous agents for recurring and more complex organizational work.
The enterprise service is designed to access corporate data through Work IQ APIs and Microsoft-hosted tenant environments. Autopilot agents receive dedicated identities, permissions, and audit trails, while usage-based services including Cowork, Code, and Autopilot are disabled by default and governed by administrator spending controls; chat and Office-integrated features remain subscription licensed. The capabilities are initially available through Microsoft's Frontier Program, and the company plans an IT-administered plugin registry by month-end.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Microsoft announced Agent 365 management capabilities under its FinOps for AI initiative, enabling administrators to review agent-related spending and benefits. The offering also provides end users visibility into credit consumption and remaining credits.
Microsoft began rolling out a revamped Copilot application for personal and business users, organized into Home, Code, and Autopilot sections. The rollout initially targets Frontier Program customers, with Code intended to expand to additional customers in subsequent weeks.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
zdnet.com
Open sourcetomshardware.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft has announced a major upgrade to its Copilot AI integration in Windows 11, introducing a new feature called Copilot Actions. This feature enables AI agents to perform real tasks on users' local files and applications, moving beyond simple chatbot interactions to more advanced, agentic capabilities. Copilot Actions allows users to interact with their PC using natural language, voice commands, and visual cues, enabling the AI to open and close apps, update documents, organize files, book tickets, and send emails on behalf of the user. The feature is currently being tested by members of the Windows Insider Program and will eventually be rolled out to all Windows 11 PCs, regardless of whether they are classified as Copilot+ devices. Microsoft has emphasized the importance of security and privacy in the design of Copilot Actions, especially in light of previous controversies such as the Recall feature. To address potential risks, Copilot Actions requires explicit user permission before taking any action, and users retain the ability to control or revoke access at any time. Each AI agent operates within its own isolated Agent Workspace, ensuring that actions taken by one agent do not affect others or the broader system. Agents run under distinct standard Windows accounts with no administrative privileges, and their activities are governed by strict application and file system access rules. Microsoft has also implemented operational trust measures, such as digitally signed agents, and all agent activities are subject to the Microsoft Privacy Statement and Responsible AI Standard. The company is optimizing these workspaces to minimize any impact on system performance and has confirmed that there will be no changes to Windows 11 hardware requirements. The introduction of Copilot Actions represents a significant shift in how users interact with their PCs, transforming AI from a passive assistant to an active digital collaborator. However, this evolution also raises new questions about trust, as users must decide whether to allow AI agents access to sensitive files and applications. Microsoft is addressing these concerns by building in robust security guardrails and transparency around agent actions. The company is taking a cautious approach, learning from past experiences and ensuring that security controls are in place before the feature becomes widely available. As Copilot Actions moves from testing to general availability, Microsoft is expected to continue refining its security and privacy measures based on user feedback and ongoing risk assessments. The rollout of Copilot Actions is part of Microsoft's broader vision to deeply integrate AI into the Windows desktop environment, aiming to enhance productivity while maintaining user trust and system integrity. Security professionals and CISOs should closely monitor the deployment of Copilot Actions, assess the potential risks associated with agentic AI, and ensure that organizational policies are updated to address these new capabilities. The evolution of Copilot in Windows 11 underscores the growing importance of balancing innovation with security and privacy in the age of AI-driven computing.
Jun 29, 2026
Microsoft is tightening and clarifying how **Copilot** can access and process user and organizational data across the Microsoft ecosystem. Microsoft is expanding **Purview Data Loss Prevention (DLP)** enforcement so policies that block Copilot from processing restricted/sensitivity-labeled content will apply not only to files in **SharePoint** and **OneDrive**, but also to **locally stored** Word, Excel, and PowerPoint documents. The change is planned for deployment via the *Augmentation Loop (AugLoop)* Office component between late March and late April 2026, and is expected to be automatically enabled for organizations already configured to block Copilot from processing labeled content; Microsoft says the update works by allowing the Office client/AugLoop to read sensitivity labels directly rather than relying on Microsoft Graph calls tied to SharePoint/OneDrive URLs. Separately, a Copilot “Memory” setting labeled **“Microsoft usage data”** has been reported as enabling Copilot to reference data from other Microsoft products (including **Bing, MSN, and Edge**) to personalize conversations, with an option for users to disable it if they have privacy concerns. A third, unrelated Microsoft 365 issue—an acknowledged bug in **classic Outlook** that can cause the mouse pointer to disappear—does not materially relate to Copilot data access or DLP controls and appears to be a usability defect rather than a security event.
Jun 29, 2026
Microsoft is introducing new security measures and features to address the growing use of AI agents within enterprise environments. The company announced Entra Agent ID, which extends Microsoft Entra's identity and access management (IAM) capabilities to AI agents, treating them with the same governance and controls as human users. This includes assigning unique identities to agents and applying conditional access, identity governance, and protection policies. The move is in response to the anticipated proliferation of both sanctioned and unsanctioned AI agents within organizations, aiming to mitigate risks associated with shadow IT and unauthorized agent activity. Additionally, Microsoft is rolling out a strengthened Content Security Policy for Entra ID sign-ins, restricting script execution to trusted Microsoft domains to prevent external script injection and cross-site scripting attacks during authentication processes. Alongside these IAM enhancements, Microsoft is experimenting with new features such as the Agent Workspace for Copilot, which allows AI agents to access and manipulate files in isolated environments on Windows systems. While this feature is designed to improve productivity, it comes with significant security warnings. Microsoft documentation highlights risks such as cross-prompt injection, where malicious instructions embedded in files or applications could trick AI agents into performing unauthorized actions, including data exfiltration. To address these concerns, Microsoft emphasizes user supervision, least privilege access for agent accounts, and explicit user approval for sensitive actions. These developments reflect Microsoft's broader strategy to secure the expanding role of AI agents in enterprise IT while acknowledging the unique security challenges they introduce.
Jul 1, 2026