microsoft

Announced at Build 2026, Coreutils for Windows packages a Rust uutils build of coreutils, findutils, and grep as a single native binary installable via WinGet, though the GitHub repo still labels it a preview.

June 2026's update tops the previous record of 177 CVEs and includes CVE-2026-45657, a wormable 9.8 kernel use-after-free.

Microsoft unveiled seven proprietary MAI models led by the 35B-active reasoning model MAI-Thinking-1, all trained from scratch without distillation as it reduces its dependence on OpenAI.

The June 3 release adds cross-machine chat session sync, a Research Agent preview, 1M-token context windows, and a two-hour delay on extension updates.

Microsoft rated the Copilot command-injection flaw Critical, with a 7.7 CVSS base score. It was already mitigated in the cloud and not exploited.

At Build 2026, Microsoft revealed Project Solara, a chip-to-cloud platform built on AOSP for devices that run AI agents instead of apps, including a reference-design wearable badge.

Belgium's CCB warns the 9.8-rated Netlogon RCE is exploited in the wild, threatening domain controllers. Microsoft says it has no evidence.

At Build 2026 in San Francisco, Microsoft unveiled Project Polaris to replace GPT-4 Turbo in GitHub Copilot, open-sourced the Windows Agent Framework, and previewed the Windows Agent Runtime and Azure Agent Mesh.

Microsoft open-sourced its Eclipse IDE Copilot plugin on May 21, releasing roughly 15,000 lines of Java under MIT and drawing 1,200+ stars within hours.

VS Code 1.121, released May 20, adds remote agent sessions over SSH and dev tunnels, native Mermaid diagram rendering, HTML file preview, and a new Agent Host Protocol for multi-client agent coordination.

Microsoft's Digital Crimes Unit seized signspace.cloud and revoked more than 1,000 fraudulent code-signing certificates after Fox Tempest sold access to Azure Artifact Signing for $5,000–$9,000 per transaction to ransomware groups including Rhysida, Akira, and Qilin.

Microsoft has disclosed an actively exploited cross-site scripting flaw in on-premises Exchange Server's Outlook Web Access. No patch has shipped; CISA gave federal agencies until May 29 to apply mitigations.