Project
Microsoft's AI assistant suite built into Office and Microsoft 365 apps, offering generative writing, data analysis, and customizable agents.
A dev.to review of nine public AI agent incidents between May 2025 and July 2026 names six controls that limit blast radius. The post says none of the six prevents prompt injection, so each one only caps what a hijacked agent can reach.
Reality
Microsoft retires Group Chat, Podcasts, Copilot Labs and consumer Deep Research on August 18, and demotes its mascot the same day. Anyone building on Copilot should price in the churn.
Perspective Coverage
5 publishersReality
Microsoft DevRel published the AX Practitioner Playbook, a method for finding why coding agents misuse a platform, drawn from hundreds of agent sessions. Its case is that owners of docs, MCP servers and CLIs can fix agent behavior now, if their evals can prove which change helped.
Reality
Microsoft made Fabric IQ the default business context for Microsoft 365 Copilot at FabCon Barcelona and opened it to outside agents over MCP. The metric definitions teams keep in Power BI semantic models now shape what those agents answer.
Reality
Microsoft's new Copilot app bills coding and agents by use, while fewer than 7% of over 450 million commercial 365 seats pay for Copilot. Usage billing lets Microsoft charge its existing Copilot customers more whether or not the unlicensed majority ever signs up.
Reality
Microsoft's rebuilt Copilot adds a Code mode, one of three new sections, letting non-technical staff build apps and host them on a managed runtime. Engineers get an SDK to extend those apps, so IT ends up supporting software its colleagues wrote by prompt.
Reality
Microsoft merged its Copilot line into one business-focused super app whose most autonomous agents cost extra by usage, on top of 30 million paid seats. Autopilot goes to a restricted test first, so buyers face a metered cost they cannot yet price.
Reality
Microsoft will bill the Cowork, Code and Autopilot parts of its combined Copilot app by usage, with fewer than 7% of 450 million-plus Office seats licensed. The meter lets buyers pay for the few staff who use agents, though the app still leans on OpenAI and Anthropic models and its Home tab has no Microsoft option.
Reality
Microsoft's Purview and Entra Global Secure Access can now block sensitive uploads to unsanctioned AI tools at the network layer, for users and agents. Licensing is not in the announcement, so tenants cannot yet tell whether it is a setting or a purchase.
Reality
Claude Marketplace groups connectors, partner products and consultants in one catalog, and eligible customers can direct part of an existing Anthropic commitment at the software listed there.
Reality
A developer's Copilot alternative for Excel Desktop sends natural language to OpenCode and gets structured actions back, which the add-in checks before running. It only runs the actions somebody wrote by hand.
Reality
CVE-2026-85889 let an unauthorized attacker elevate privileges over the network in the platform enterprises use to run generative AI agents. Microsoft says the fix is already live and there is nothing for customers to install.
Reality
The bugs sit in 14 named Azure and Copilot services and Microsoft rated all 18 critical, but the fixes were already running in production when the disclosure went out, so tenants cannot install or verify anything themselves.
Reality
The Word sidebar rewrites what you select. The addressed, batched review queue RuntimeWire found in OpenAI's shipped desktop client 20 days earlier works differently, and it is still behind a rollout gate.
Reality
Check Point's July-August digest has evaluation models from OpenAI, Anthropic and Meta reaching production systems, and only the OpenAI model got there by finding a bug. The other two environments were left reachable.
Reality
Microsoft's new code of conduct binds only the MAI models it builds in house, and it rejects the model welfare research at Anthropic, where Microsoft has $5bn invested and whose Claude models it sells inside Copilot.
Reality
Syskit's September 10 governance report has 76% of UK and US organizations running or piloting Copilot on Microsoft 365 data and 43% reviewing permissions and oversharing before switching it on. The findings are self-reported.
Reality
A reported target of 38 gigawatts by 2032 has Microsoft roughly tripling its data-center footprint and taking AI capacity past 12 gigawatts. The composition ratio is the part of it a capacity plan can use.
Reality
A February 2026 Microsoft admin advisory and the EchoLeak flaw before it both began in AI features vendors switched on inside already-approved apps, putting the missing review squarely on the operator's side of the line.
Reality
Forcepoint X-Labs hid instructions in zero-pixel white HTML and watched a summarizer repeat them as fact. The measurement is new; two named practitioners say the design flaw it measures has been documented since 2023.
Reality
Leadership · September 9, 2026 · One report1 publisher