❌

Normal view

Microsoft quer abrir a porta à era dos agentes de IA autónomos no trabalho com o Copilot Cowork

17 June 2026 at 18:19

O Copilot Cowork, que passa a estar disponível a nível internacional, é um agente de IA que promete tratar do trabalho real e ajudar na produtividade. Tarefas que levavam dias a concluir passam agora a ser finalizadas numa manhã, afirma a Microsoft.

The post Microsoft quer abrir a porta à era dos agentes de IA autónomos no trabalho com o Copilot Cowork appeared first on Tek Notícias.

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

16 June 2026 at 12:15

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft revealed how their proof-of-concept exploit could retrieve 2FA codes and other sensitive data from emails accessible to Copilot.

Microsoft and other LLM providers have been unable to prevent their products from complying with malicious requests to reveal data. The root cause: AI bots are unable to distinguish between instructions provided by users and those snuck into third-party content the models are summarizing, drafting responses to, or using to perform other actions on behalf of the user. With no way to secure this crucial boundary, Microsoft and its peers are left to erect complicated and ad hoc guardrails designed to rein in the consequences of this incurable gullibility.

Jumping over guardrails

One guardrail built into Copilot and most other LLMs prevents them from submitting web forms, sending emails, and taking similar actions that can be used to exfiltrate data from the user. To work around this, LLM hackers turned to markup language, which, among other things, allows users to add formatting elements such as headings, lists, and links to text without the need for HTML tags. Another workaround is to wrap sensitive data inside HTML tags such as <img> and <form>. In either case, a web request showing the data hits the attacker’s web server, where the secret information is captured in logs.

Read full article

Comments

© Photo Illustration by Thomas Fuller/SOPA Images/LightRocket via Getty Images

Microsoft plans Linux tools and an RTX Spark desktop for Windows developers

2 June 2026 at 23:51

Microsoft's Build developer conference kicked off today, and as with almost everything the company has done in the last few years, Microsoft's opening keynote focused overwhelmingly on AI and other closely related technologies. There's Microsoft Scout, an OpenClaw-based "Autopilot" agent that can hook into Microsoft 365 data to perform tasks for users; several new AI models; an expanded preview of "Codename MDASH," which is a "multi-model agentic scanning system" meant to detect and fix software vulnerabilities.

A few of those announcements stood out to us as particularly interesting, either for esoteric technical reasons or because they seem like they may have some utility for those who aren't spending their every waking moment using generative AI tools. (Microsoft's recent efforts to make its flagship operating system faster, more reliable, more useful, and less annoying didn't really come up, but there have been plenty of other announcements on that front lately.)

On the hardware front, we didn't get any updates for existing Surface devices (not counting yesterday's Surface Laptop Ultra announcement), but we did get something new: the Surface RTX Spark Dev Box is "a compact developer PC" built around Nvidia's new RTX Spark chip with up to 128GB of built-in memory.

Read full article

Comments

© Microsoft

❌