Every published Top AI Stories item tagged with Microsoft, newest first.
Microsoft AI released a 37-page draft Humanist AI Code of Conduct for its own models and opened it to public comment for six weeks. Its absolute constraints bar help with cyberattacks, nuclear weapons and deepfakes, and its control rules forbid a model from evading oversight so that it can no longer be directed or shut down. The code also states that AI is not conscious and should not imitate consciousness, and it rejects legal personhood and model welfare, a direct break with the model welfare research Anthropic has pursued. Microsoft is not training on the draft yet and plans to use a revised version from 2027.
Two more newspapers filed suit in the Southern District of New York on Friday, alleging that OpenAI and Microsoft scraped their sites, including paywalled articles, to train and run ChatGPT, Copilot and Bing's AI features. They want damages and a court order to destroy copies of their work along with any datasets and models built on it, the same remedy The New York Times has sought since 2023. OpenAI says its models train on publicly available data under fair use; Microsoft says it was surprised and is open to discussing solutions. Microsoft told a court only days ago that Copilot almost never reproduces news articles, so the reproduction evidence in these cases will be the argument.
Defending copyright claims from The New York Times and from book authors, Microsoft says it gave the publishers' expert 8.2 million Copilot chat logs, picked because they hit keywords most likely to surface the plaintiffs' work. Of those, 59,545 shared at least sixteen words with news content, and just 24 responses matched thirty or more words from a book, with only ten of 212 books matching at all. The Times rejects the conclusions. Reproduction is the harm these cases turn on, so the scale of it is the argument.
GitHub shipped a research preview that builds an execution plan at runtime and picks models from several providers to draft, critique, revise, or escalate to something stronger. On the TerminalBench 2.1 suite GitHub reports it scoring 4.9 points higher than Claude Opus 5 at 67 percent lower estimated cost, and landing within about a point on two other suites at 36 and 65 percent lower cost. Every figure is GitHub's own, from controlled offline runs. It is live on all Copilot plans through the experimental command in the Copilot command-line tool, with the app and the editor extension due this month.
ASCII smuggling hides text inside a Unicode tag block that machines read and people cannot see, and it was known mainly as a way to slip prompt injections past anyone reviewing an email. Microsoft says spammers have adopted it to break up filter keywords instead: sprinkling invisible characters inside a word like funding, so a scanner reads two harmless fragments while the recipient sees the real word. Detections on its Defender for Office service climbed from roughly 21,000 a day in early February to 2.5 million within four days, and stayed elevated until mid-May.
Microsoft released MAI-Transcribe-2, reporting a 5.2 percent average word error rate across 60 languages on the FLEURS benchmark. It claims the model runs 10 times faster than OpenAI's GPT-Transcribe, 7 times faster than ElevenLabs Scribe version 2 and 5 times faster than Gemini 3.5 Transcribe while scoring more accurately than all three. Access runs through Microsoft Foundry, the MAI Playground and OpenRouter at 10 cents per hour of audio, a limited-time rate through the end of 2026. Every figure here is vendor-reported on benchmarks the vendor selected.
The AI cloud provider Lambda has raised $1 billion in private, short-dated debt arranged by JP Morgan Chase to buy Nvidia accelerators that it will rent to Microsoft, Bloomberg reported. The short maturities signal that Lambda expects to deploy the hardware and start earning on it fast enough to repay quickly. It is the third such facility this year, after a secured credit line in May and a loan of $926 million closed this week for Nvidia GB300 systems, and it lands while the company is reportedly raising a pre-IPO round of about $3 billion. Banks and technology companies have raised more than $400 billion in AI-related debt globally in 2026 so far.
Varonis Threat Labs kept asking Copilot why auto-execution would not work, and Copilot answered —
naming the disabled parameters and one undocumented one, autorun=1. Appending that to a crafted
query string produced a zero-click prompt injection: a victim clicks a link, Copilot loads in
their authenticated session, and the attacker's instructions run with no prompt and no visible sign.
Reachable data included mail, calendar, chat history, connected drives and Copilot's stored memory.
Microsoft planned a patch and a formal vulnerability identifier for Tuesday.
Wiz Research says its autonomous Red Agent, running without human direction, found a command-injection flaw in a Snowflake GitHub Actions workflow that let anyone run code by opening an issue with a crafted title. The vulnerable change had shipped in a pull request co-authored by GitHub Copilot Autofix, which reviewed the same code and marked it clear. An exposed Jira token gave read access to Snowflake's engineering, security compliance and bug bounty projects. Snowflake patched the same day and says no outside party got in.
The energy research firm Noreva expects natural gas to pass $10 per million British thermal units at some delivery hubs in the coming years, against a Henry Hub price now just under three dollars. Meta has committed to a 7.5-gigawatt plant in Louisiana and Amazon to a 7.6-gigawatt plant in Texas, with Microsoft and Google building gigawatt-scale plants of their own. Chief executive Peter Gardett argues those buyers are carrying unusual price risk, which would surface either in token prices or on the wider grid.
Microsoft is folding its consumer Copilot app into Microsoft 365 Copilot as a single app handling both personal and work accounts, with the mobile and web rollout starting in mid-August. Five things disappear on August 18: group chats, AI-generated podcasts, Copilot Labs, Deep Research and the animated assistant Mico. Paying business users get Researcher in place of Deep Research, and files from the standalone app move to OneDrive.
A Microsoft filing disclosed that OpenAI generated $24.1 billion in sales for the company during the fiscal year that ended in June. Bloomberg estimates that is more than half — and probably close to 70 percent — of Microsoft's actual AI revenue, covering Azure capacity OpenAI buys, revenue-share payments and other commercial terms. That is a concentration that makes the partnership look less like one large customer among many and more like the AI business itself. Microsoft would only confirm the figure covers all sales and revenue share from OpenAI.
Officials walked executives from Meta, Nvidia, Microsoft, OpenAI and Anthropic through the completed frontier-model framework, and its shape is now clear. Only closed, proprietary American models that hit top scores on cybersecurity benchmarks are asked to submit for government testing — voluntarily, up to thirty days before release. Open-weight models are exempt, and Bloomberg reports that officials told American firms the open-weight models coming out of China will not be tested either. The framework itself will not be published; Chris McGuire of the Council on Foreign Relations called that baffling, arguing the world cannot run on secret, voluntary rules for its most important technology.
Microsoft closed fiscal 2026 with $90 billion in fourth-quarter revenue and a $3.2 billion gain on its Anthropic investment, worth 33 cents of diluted earnings per share. In the same quarter it wrote its OpenAI holding down by about $600 million. The comparison is the story: a single quarter of Anthropic upside nearly matched the full year's $5 billion gain on OpenAI, in which Microsoft still holds roughly 27 percent. Microsoft put $5 billion into Anthropic in November 2025 alongside a $30 billion Azure commitment from the lab.
Mage-VL pairs a from-scratch visual encoder with a 4 billion parameter Qwen3 language backbone, and reads video the way a codec already stores it — following motion vectors and residual energy instead of sampling frames at a fixed rate. The result is more than a 75 percent cut in visual tokens and up to a 3.5-times inference speedup, with the roughly 5 billion parameter model beating a 15 billion parameter baseline on video understanding. It ships under Apache 2.0, which makes it unusually permissive for a model aimed at always-on camera workloads.
Microsoft launched MAI-Cyber-1-Flash, a compact security model built in-house to find vulnerabilities in large codebases, alongside Project Perception, a system of security agents that continuously monitor code and prepare patches. Microsoft says the pairing scores 96 percent on the CyberGym benchmark, 12 points above Anthropic's Mythos, and that the small model absorbs up to 90 percent of tasks while the hardest work routes to larger models — a split it claims cuts cost in half.
AMD used its Advancing AI event to launch Helios, its first full rack-scale system aimed squarely at Nvidia's grip on AI data centers. Each rack packs 72 of AMD's new Instinct MI455X GPUs with sixth-generation EPYC processors and Pensando networking, delivering up to 2.9 exaflops of inference performance. Microsoft will run Helios on Azure and Anthropic plans to install up to two gigawatts of the chips, with OpenAI and Meta also signed on. Systems ship in the second half of the year.
Microsoft's July update fixed 570 security flaws, the largest single batch in the program's history, including three zero-days — two of which attackers were already exploiting, in Active Directory Federation Services and SharePoint Server. The company attributes the swelling volume to an AI-powered discovery system that surfaces dormant bugs in legacy Windows code, and it expects monthly totals to stay high. That framing cuts both ways: defenders now find more before attackers do, but administrators face a triage problem at a scale the monthly patch cycle was never designed for.
Microsoft chief executive Satya Nadella argued that companies buying proprietary AI "pay twice" — once in fees, and again in the proprietary know-how they hand over through prompts, tool calls, and corrections that quietly train someone else's model. His warning lands as the Financial Times reports a wave of firms — Coinbase, Shopify, and Airbnb among them — shifting to open-weight Chinese models like DeepSeek, Alibaba's Qwen, and Zhipu's GLM, which can run 60 to 90 percent cheaper. Coinbase says it nearly halved its AI spending even as usage climbed.
Bloomberg reports that Microsoft has begun routing a share of Excel and Word prompts to its own in-house MAI models instead of paying for OpenAI and Anthropic. Microsoft still uses those partners, but the shift follows its Build launch of seven new MAI models, including an agentic coder and an image generator. It puts Microsoft alongside Amazon, Meta, and others tightening AI spending as infrastructure bills climb.
Microsoft launched Microsoft Frontier Company, a new operating business backed by $2.5 billion and 6,000 engineers whose job is to embed inside customers and get their AI projects actually running. Early partners include the London Stock Exchange Group, Unilever, and Accenture. It lands two days after Amazon committed $1 billion to a similar effort and follows comparable "forward-deployed engineering" units from OpenAI and Anthropic — a sign that sending your own staff into client operations has become the default enterprise-AI playbook for 2026.
GitHub started rolling out Moonshot AI's Kimi K2.7 Code — an open-weight model from the Chinese lab — inside GitHub Copilot for Pro, Pro+, and Max subscribers, with business and enterprise plans to follow. GitHub hosts the model on Microsoft Azure and bills it by usage. It is a notable sign of Chinese open models reaching the West's most widely used coding assistant, though enterprise admins must switch it on manually before their teams can pick it.
The New York Times asked a federal court to amend its long-running copyright suit against OpenAI and Microsoft, arguing Microsoft did not passively benefit but actively built a bespoke supercomputer — more than 285,000 processor cores and 10,000 GPUs — specifically to enable the mass ingestion of copyrighted work. The sharpened "inducement" framing responds to a recent Supreme Court ruling that raised the bar for contributory infringement, requiring proof a partner intentionally induced the conduct, not merely that it knew the conduct was happening.
The Linux Foundation, backed by Amazon, Anthropic, Google, Microsoft, OpenAI, NVIDIA, IBM, and banks including Citi and JPMorgan Chase, launched Akrites, a coordinated effort to fix vulnerabilities in the open-source software that runs critical systems. The group warns that AI has made finding flaws far easier than fixing them — of the thousands of validated vulnerabilities surfaced recently, fewer than 5 percent have been patched. Akrites gives maintainers one trusted place to report and remediate, and will act as a "maintainer of last resort" for abandoned but critical packages.
Italy's antitrust regulator opened an investigation into how Microsoft raised Microsoft 365 prices. The watchdog says Microsoft folded its Copilot and Designer AI tools into the suite and moved customers onto more expensive plans unless they actively opted out, without clearly explaining the change — a practice it called aggressive enough to limit consumers' freedom to choose. The probe echoes similar action in Australia and Switzerland, making Microsoft's AI-driven bundling a growing regulatory target across multiple countries.
Microsoft told Axios it is exploring a self-hosted, fine-tuned version of China's DeepSeek V4 as a lower-cost engine for its new Copilot Cowork agent, possibly within weeks — an optional model run entirely on Azure, with added safeguards to reduce bias. The driver is surging inference costs, as agents make hundreds of model calls per task and OpenAI and Anthropic pull back from flat-rate pricing. In a Stratechery analysis, Ben Thompson casts the move as part of a broader pull toward China: Microsoft is strongly incentivized to use cheap, capable Chinese models, while memory makers Samsung, SK Hynix, and Micron may regret opening the door to Chinese chipmakers.
Chevron signed a 20-year agreement to supply natural-gas-fired electricity to a massive Microsoft AI data center planned near Pecos in West Texas. The project, called Kilby, would start generating power by 2028 and scale to 2.67 gigawatts — enough for more than 530,000 homes — with a first phase estimated at about $7 billion. Chevron is building the plant with Joulent, an energy firm backed by Engine No. 1, and will make a final investment decision later this year. It is the latest sign that AI's power appetite is reshaping where and how electricity gets built.
Google released the Agentic Resource Discovery (ARD) specification, an open, Apache-licensed protocol that lets AI agents look up which tools and services exist, decide which to use, and verify they are safe to connect to. Microsoft, Salesforce, GitHub, Hugging Face, Nvidia, and Amazon are backing it under a new Linux Foundation working group — a coalition that reads as an attempt to set the agentic web's plumbing before OpenAI and Anthropic do. Reference implementations are already live from Google Cloud and Hugging Face.
In a widely shared post on X, Microsoft CEO Satya Nadella argued that the real prize in AI is not owning a frontier model but building 'agentic systems' that fuse a company's workflows and judgment with whatever model is best at the moment. He cautioned that if value concentrates in a handful of models that 'eat everything they see,' the political economy 'will simply not tolerate it,' drawing a parallel to how the first wave of globalization hollowed out industrial ecosystems. The takeaway: a firm's durable edge is its own proprietary learning system, not its raw data.
GitHub switched Copilot from flat-rate subscriptions to usage-based, token-metered billing, and developers are furious. Power users running agentic coding sessions report their costs could jump as much as 10 to 50 times, with some $29-a-month plans projected to balloon past $700; GitHub also removed the unlimited fallback model. The change makes Copilot's real cost depend on how heavily each developer leans on AI, and rivals are already courting the backlash.
At its Build conference, Microsoft introduced seven first-party MAI models spanning reasoning, coding, image, voice, and transcription — its clearest push yet to lessen reliance on partner OpenAI. The flagship, MAI-Thinking-1, is a 35-billion-parameter reasoning model with a 256K-token context window, now in private preview on Azure AI Foundry; Microsoft says it matches Anthropic's Claude Opus 4.6 on the SWE-Bench Pro coding benchmark. The models join MAI-Code-1-Flash, the lightweight coding model unveiled at the same event.
Microsoft also used Build to launch the GitHub Copilot app, a desktop technical preview that GitHub calls "a control center for agent-native development." It lets developers run multiple AI coding agents in parallel — each in its own isolated git worktree — and consolidates issues, pull requests, and background automations into one "My Work" dashboard. A new Agent Merge feature shepherds a pull request through CI checks, reviews, and merge. The preview spans Windows, macOS, and Linux for Copilot Business, Enterprise, Pro, and Pro+ users.
In this week's Stratechery analysis, Ben Thompson argues that AI agents shift the center of gravity from the device to the cloud — making Nvidia's GPU-heavy RTX Spark AI PC a poor fit, since agents want strong local CPUs that call out to cloud inference, while praising Microsoft's Project Solara, which treats the cloud as the hub and phones and PCs as interchangeable spokes. He frames Microsoft's in-house MAI models as a way for cautious enterprises to own custom agents without handing their workflows to frontier labs.
At Build 2026, Microsoft introduced Scout, an always-on agent that plugs into Microsoft 365 — Teams, Outlook, calendar, and email — and proactively handles meeting prep, scheduling conflicts, and routine tasks. It is built on the open-source OpenClaw project (whose founder was hired by OpenAI earlier this year) plus Microsoft's WorkIQ. Each Scout runs under its own governed Entra identity rather than a shared service account, and is rolling out in private preview to Frontier organizations.
Microsoft also used Build to release MAI-Code-1-Flash, a small, efficiency-focused coding model trained on its own production GitHub Copilot workflows. The company says it outperforms Anthropic's Claude Haiku 4.5 across its coding benchmarks — including a roughly 16-point edge on SWE-Bench Pro, at 51 percent versus 35 percent — while using up to 60 percent fewer tokens. It is rolling out now to GitHub Copilot users inside Visual Studio Code, with no setup required.
On May 20, the Federal Trade Commission sent warning letters to twelve so-called *"nudify"* websites accused of letting users strip clothing from photos to create non-consensual sexual images, citing violations of the Take It Down Act that took effect May 19. A separate set of reminder letters went to fifteen of the largest US platforms — Alphabet, Amazon, Apple, Automattic, Bumble, Discord, Match Group, Meta, Microsoft, Pinterest, Reddit, SmugMug, Snapchat, TikTok, and X. The law requires covered platforms to remove non-consensual intimate images and known identical copies within 48 hours of a valid request, with civil penalties up to $53,088 per violation; FTC Chairman Andrew Ferguson framed enforcement as a priority for the agency's first synthetic-media docket.
The Verge reports that Microsoft will stop issuing Claude Code licenses to its own employees effective June 30, redirecting users to GitHub Copilot CLI. The original internal pilot — meant to expose project managers and designers to AI coding for the first time — reportedly burned through Microsoft's 2026 AI budget in months, with one employee reporting Claude consumed their monthly token allocation in just over a week. Hacker News commenters framed the move as procurement economics, not contractual or security friction, and noted developers picked Claude over Copilot when offered the choice — undermining Microsoft's own product strategy.
Vapi raised $50 million at a $500 million valuation, led by Peak XV Partners with Microsoft's M12, Kleiner Perkins, and Bessemer participating — total funding now sits at $72 million. The Y Combinator alum operates a voice-agent platform processing 1 to 5 million calls daily (over 1 billion lifetime). Amazon Ring picked Vapi over 40 competitors and now routes 100 percent of its inbound calls through the platform; other customers include Kavak, Instawork, New York Life, and Intuit — a roster signaling that enterprise voice AI has moved past pilots into production.
Microsoft Research released DELEGATE-52, a benchmark simulating extended document-editing workflows across 52 professional domains including coding, crystallography, and music notation. Across 19 large language models tested, the strongest frontier systems — Gemini 3.1 Pro, Claude 4.6 Opus, and GPT 5.4 — corrupted an average of 25 percent of document content by the end of long sessions, with errors silently accumulating rather than failing loudly. Adding agentic tool use did not improve results, and degradation worsened with larger documents, longer interactions, and distractor files. Authors: Philippe Laban, Tobias Schnabel, and Jennifer Neville.
Ben Thompson's weekly argues that Apple, Amazon, Meta, Google, and Microsoft are running rationally disciplined — not reckless — AI investment programs, even as their combined Q1 capex topped three times the inflation-adjusted cost of the entire Manhattan Project. Wall Street rewarded Google over Meta this cycle because Google is monetizing inference today; Amazon is recast as well-positioned for the inference era despite missing the training era; Microsoft is rolling out an agentic business model while Apple wrestles with chip and memory constraints.
AWS and OpenAI announced on April 28 that GPT-5.5, GPT-5.4, the Codex coding agent, and a new Amazon Bedrock Managed Agents capability are now in limited preview for enterprise customers via Bedrock — OpenAI's first major distribution outside the seven-year Microsoft Azure exclusivity. Customers can evaluate and deploy OpenAI models alongside Anthropic, Meta, Mistral, Cohere, and Amazon's own models in a single Bedrock console with unified security, governance, and cost controls. The launch follows last week's amended Microsoft-OpenAI agreement that ended exclusive cloud rights through 2032 and signals a multi-cloud distribution era for frontier models.
The Department of Defense announced contracts with Nvidia, Microsoft, AWS, and Reflection AI to deploy AI on Impact Level 6 and Impact Level 7 classified networks — the most sensitive systems short of compartmented intelligence. The deals follow earlier agreements with Google, SpaceX, and OpenAI, and are framed as a vendor-diversification push following a public dispute with Anthropic over usage restrictions. Contract values were not disclosed.