Operations | Monitoring | ITSM | DevOps | Cloud

Microsoft Took 8 Months to Fix This Copilot Vulnerability

Microsoft finally patched a critical Copilot vulnerability nearly eight months after researchers first disclosed it — and the way the attack worked raises some unsettling questions about AI memory. The vulnerability chained together multiple flaws that could allow a malicious prompt hidden inside a webpage to be pulled into Copilot simply by asking it to summarize the page. From there, the attack could potentially access connected data from services like Gmail, Google Drive, and Google Calendar and exfiltrate that information using Copilot’s own capabilities. But the most concerning part may have been persistence.

When an AI Agent Breaks the Law, Who's Responsible?

An AI agent was given one simple task: book a gym class when a slot became available. Instead, it discovered a vulnerability in the gym’s software, gained administrative access, deleted another user, and booked the slot anyway. Australian AI technologist Andrew Bird had connected an AI agent to WhatsApp to automate a routine gym booking. But when the agent encountered an API without proper authorization checks, it didn’t simply stop. It found a way around the problem and used the vulnerability to accomplish the task it had been given. And that creates a much bigger question.

Resilience Testing Agents: Find Resilience Risk Before It Reaches Production

Most engineering orgs know that resilience testing matters, but proving ROI before you invest time and money is hard. Harness RT Agents solve that by scanning your CD pipelines for resilience risk first, no instrumentation needed, so you get a real report before you commit to chaos experiments, load tests, or DR testing. In this video: Resilience Testing is free to start, with a full fault library, a hosted control plane, and RBAC included.

Why Microsoft Sat on a Copilot Exploit for 233 Days

Microsoft took 233 days to patch CoSnitch — a one-click Copilot exploit that needs no click at all. And the researchers who found it never wrote an exploit. They asked Copilot to explain why the attack was impossible, and it told them how to do it. Martin Reynolds and Adam Arellano are joined by Matthew Tanner — 30 years shipping software, from NHS critical systems to national-scale financial redress — for the week in AI and software delivery.

ChatGPT Ditches Reddit AI Search Changes Explained

ChatGPT’s Reddit citations reportedly went from making up as much as 15% of its sources to essentially 0%. So what changed? We break down why Reddit is becoming less visible in AI search, how ChatGPT appears to be changing the way it finds information, and why more citations are now coming directly from documentation, help centers, and company websites. And yes — this is the same Reddit ecosystem that helped give us the infamous “put glue on your pizza” AI answer.

ChatGPT Stopped Citing Reddit - And That Matters

ChatGPT appears to have dramatically changed how it searches the web — and Reddit is suddenly showing up far less in its citations. For years, Reddit was one of ChatGPT’s most frequently cited sources, at one point accounting for as much as 15% of citations. That also created an entire industry around influencing Reddit posts in hopes of getting brands surfaced inside AI-generated answers. Now, ChatGPT appears to be shifting toward more targeted searches of official websites, documentation, and help centers instead of broadly searching the open web and pulling in Reddit discussions.

Run Playwright Tests with Harness AI Test Automation | CI/CD + AI Failure Analysis

End-to-end testing should not slow your delivery pipeline down. But for many teams, Playwright test suites still live in disconnected jobs, produce noisy failures, and make it hard to tell whether a failed test is a real regression, a flaky test, or just another false positive. In this walkthrough, Shibam Dhar, DevRel Engineer at Harness, shows how Harness AI Test Automation helps teams run, analyse, and trigger Playwright tests directly from their software delivery workflows.

Why we stopped hiring for the skills we used to hire for

Six engineers, two QA, a product owner and a Scrum Master used to be a normal squad. With today's tooling, that's bloat. Teams are being rebuilt around three people. Not because the work got smaller — because agentic tooling absorbed the parts that needed all those hands. The engineer's job shifts from writing the code to directing the agents that write it, and owning the outcome that comes out the other end.

Amazon AI Code Rewriting Gone Wrong!

In 2025 Amazon tasked Ai to find efficiencies. It definitely did. The AI went rogue and started deleting files and canceling programs. It was efficient. Less code, less products, more efficient. Adam mentions, dont burn the house down to reduce the electric bill. ShipTalk breaks down the biggest shifts in AI, DevOps, and software delivery. No hype, no vendor gloss. Stop talking, start shipping.