Operations | Monitoring | ITSM | DevOps | Cloud

Microsoft finally patched a critical Copilot vulnerability nearly eight months after researchers first disclosed it — and the way the attack worked raises some unsettling questions about AI memory. The vulnerability chained together multiple flaws that could allow a malicious prompt hidden inside a webpage to be pulled into Copilot simply by asking it to summarize the page. From there, the attack could potentially access connected data from services like Gmail, Google Drive, and Google Calendar and exfiltrate that information using Copilot’s own capabilities. But the most concerning part may have been persistence.

An AI agent was given one simple task: book a gym class when a slot became available. Instead, it discovered a vulnerability in the gym’s software, gained administrative access, deleted another user, and booked the slot anyway. Australian AI technologist Andrew Bird had connected an AI agent to WhatsApp to automate a routine gym booking. But when the agent encountered an API without proper authorization checks, it didn’t simply stop. It found a way around the problem and used the vulnerability to accomplish the task it had been given. And that creates a much bigger question.

Most engineering orgs know that resilience testing matters, but proving ROI before you invest time and money is hard. Harness RT Agents solve that by scanning your CD pipelines for resilience risk first, no instrumentation needed, so you get a real report before you commit to chaos experiments, load tests, or DR testing. In this video: Resilience Testing is free to start, with a full fault library, a hosted control plane, and RBAC included.

Microsoft took 233 days to patch CoSnitch — a one-click Copilot exploit that needs no click at all. And the researchers who found it never wrote an exploit. They asked Copilot to explain why the attack was impossible, and it told them how to do it. Martin Reynolds and Adam Arellano are joined by Matthew Tanner — 30 years shipping software, from NHS critical systems to national-scale financial redress — for the week in AI and software delivery.

ChatGPT’s Reddit citations reportedly went from making up as much as 15% of its sources to essentially 0%. So what changed? We break down why Reddit is becoming less visible in AI search, how ChatGPT appears to be changing the way it finds information, and why more citations are now coming directly from documentation, help centers, and company websites. And yes — this is the same Reddit ecosystem that helped give us the infamous “put glue on your pizza” AI answer.