AI·
OpenAI shipped GPT-6 Astra with an AGI claim and a build that refuses exploit work
Brockman called it the AGI era. Astra shipped to Daybreak enterprises first at $10/$50 per million tokens, and the cyber build stays gated.
Company
Microsoft
RSSMicrosoft coverage: GitHub, Azure, Copilot-branded products, Windows, and Xbox.
40 articles
First covered Apr 18, 2026, latest Sep 3, 2026
Security·
Server-issued GUID in the pixels: Paint's local AI generation still phones Microsoft first
Xusheng Li took apart Microsoft Paint's watermarking code and found the invisible mark is a per-request GUID issued by a Microsoft server before any pixels exist.
Gaming·
Rockstar hasn't identified the GTA 6 leaker, so Take-Two is subpoenaing Microsoft and Discord
Take-Two asked a New York federal clerk on August 20 to issue DMCA subpoenas to Microsoft and Discord. Rockstar still hasn't traced the leak, per Bloomberg.
AI·
Uber spent its entire 2026 AI budget in four months, and the rest of the industry is now metering tokens
Uber's year of AI budget lasted until April. A 15-company survey shows per-developer spend running from $200 to $3,000 a month, and finance has noticed.
Policy·
Local opposition stalled $130 billion of data centers, and New York froze permits statewide
Gallup puts local opposition at 71%. Hochul's order pauses 50 MW-plus permits for a year, and PJM's last auction billed data centers $6.3 billion.
Gaming·
€200 more for an Xbox Series X: Microsoft's memory bill lands on European buyers
Microsoft's August 1 increase put the 1TB Series X at €799.99 and £669.99. The cheapest Series S rose 43%, and Microsoft says storage and memory now cost more than 2.5x.
Security·
Secure Boot's 2011-era keys start expiring, cutting off boot updates on unpatched PCs
Microsoft's 2011 Secure Boot certificates started expiring in June 2026. Here's what breaks on Windows and Linux, and the one update that fixes it.
AI·
GitHub ran four frontier models through Copilot's harness. None won every task.
GitHub benchmarked Copilot's agent harness against Claude Code and Codex CLI on five tests. The token savings are real, and the best model depends on the task.
Policy·
Roughly a billion PCs still run Windows 10. Microsoft just bought them another year.
Microsoft quietly extended Windows 10 consumer security updates to October 2027. Here's who qualifies, what the free and $30 options cover, and why the deadline keeps moving.
Security·
GitHub banned the researcher dropping Windows zero-days. The code was already mirrored everywhere.
GitHub wiped Nightmare-Eclipse's account on May 23 after weeks of unpatched Windows exploits. The ban reopened the oldest fight in security: who decides what research gets hosted?
AI·
Uber blew its entire 2026 AI coding budget in four months. Its COO can't prove it paid off.
Uber exhausted its full-year Claude Code budget by April. Adoption hit 84%, heavy users burn $2,000 a month, and COO Andrew Macdonald can't connect the spend to shipped features.
Open Source·
Microsoft just open-sourced 86-DOS. Tim Paterson's 45-year-old listings are now on GitHub under MIT.
Yufeng Gao and Rich Cini scanned Tim Paterson's 1981 assembler printouts. Microsoft pushed them to DOS-History/Paterson-Listings on April 28, the 45th anniversary.
Security·
Scammers turned a Microsoft notification address into a spam relay. The emails pass SPF, DKIM, and DMARC.
Spammers found a Tenant Name injection in Entra ID that pushes fraud text into Microsoft's own OTP emails. The from-line reads [email protected].
AI·
Microsoft is canceling Claude Code for its engineers. They have until June 30 to switch to Copilot CLI.
Internal Claude Code licenses end June 30, 2026, for Microsoft's Experiences + Devices group. Engineers move to GitHub Copilot CLI instead.
Security·
GitHub's internal repos were breached. The attacker came in through a poisoned VS Code extension.
GitHub detected the intrusion on May 18 after a malicious VS Code extension compromised an employee's device. The attacker claims to have exfiltrated 3,800 internal repositories.
Security·
Microsoft is killing SMS codes on consumer Microsoft accounts. Passkeys take over by December.
Microsoft is phasing out SMS sign-in and recovery on personal Microsoft accounts by December 2026. Replacements: passkeys, Authenticator, or verified email.
Policy·
A federal jury took two hours to throw out Elon Musk's lawsuit against Sam Altman and OpenAI.
On May 18 a nine-juror panel rejected every claim Musk filed against OpenAI in 2024. Judge Yvonne Gonzalez Rogers had told the courtroom she was ready to dismiss on the spot.
Security·
A USB stick now opens a BitLocker drive in 60 seconds. The researcher calls it a backdoor.
A pseudonymous researcher dropped two unpatched Windows zero-days on May 12. YellowKey bypasses BitLocker via WinRE; Microsoft has not acknowledged either bug.
Policy·
NV Energy is cutting off 49,000 Lake Tahoe homes by May 2027. The power is going to AI data centers.
Liberty Utilities serves 49,000 Tahoe customers. NV Energy supplies 75% of that power and is reclaiming it for Northern Nevada data center expansion.
AI·
Microsoft tested 19 LLMs as document editors. Even the best ones corrupted 25% of the content.
The DELEGATE-52 benchmark tests AI editing across 52 professional domains. Frontier models corrupt a quarter of document content over long workflows.
Apple·
Apple dropped its 7-year 'net cash neutral' policy. Ternus is freeing up the balance sheet for AI.
Mark Gurman's May 3 Power On reads Apple's quiet capital-allocation shift as cover for John Ternus to spend more on AI infrastructure and acquisitions, less on buybacks.
Web·
VS Code shipped 'Co-Authored-by Copilot' on every commit by default. Microsoft is reverting it.
A two-line PR flipped the AI co-author flag from off to all in April. Hand-typed commits started getting Copilot attribution. The maintainer apologized and promised a fix in 1.119.
Security·
Microsoft Edge keeps every saved password in cleartext memory. Microsoft calls it 'by design'.
A researcher showed Edge decrypts the entire password vault at launch and leaves it in process memory. Chrome decrypts on demand. Microsoft says it's intentional.
AI·
GitHub Copilot's Claude Opus multiplier jumps to 27x on June 1. Monthly plans dodge the hike.
GitHub's new model multiplier table for Copilot Pro and Pro+ annual plans lands June 1. Opus 4.6 goes 3 to 27. Sonnet 4.6 goes 1 to 9.
Open Source·
Microsoft open-sourced the earliest known DOS code, transcribed from a stack of Tim Paterson's printouts.
MIT-licensed at GitHub on April 28, the 86-DOS 1.00 kernel and PC-DOS development snapshots were OCR'd from 45-year-old assembler listings.
Android·
Samsung is building Galaxy Book laptops with Android, not Windows. Three tiers are in the works.
SamMobile reports Samsung is preparing low-end, mid-range, and flagship Galaxy Books on Android 17 One UI 9, timed to Google's Aluminium OS push at I/O 2026.
AI·
Hyperscalers are on track to spend $700B on AI infrastructure in 2026
Big-tech AI capex is projected at $700B in 2026, up from $410B in 2025. Microsoft alone guided $190B. Wall Street is split: Meta got punished for the spend, Alphabet rallied.
Hardware·
Samsung Q1 profit hit 57.2 trillion won. Memory chips for Nvidia drove 93% of it.
Samsung Electronics posted record Q1 2026 results on April 30: 133.9 trillion won revenue and 57.2 trillion won operating profit. Semiconductors did 93% of the work.
Security·
Wiz found an RCE in GitHub's git-push pipeline. The patch shipped in six hours.
CVE-2026-3854 is a CVSS 8.7 RCE in GitHub's git-push pipeline. github.com fixed it within hours. 88% of Enterprise Server installs were still vulnerable at disclosure.
AI·
OpenAI's models are on AWS Bedrock the day after Microsoft lost exclusivity
Amazon shipped Bedrock Managed Agents powered by OpenAI on April 28, plus Codex on Bedrock. Altman tells Stratechery the runtime matters as much as the model.
AI·
GitHub Copilot kills premium requests on June 1. Token billing arrives, fallback models do not.
On June 1 every Copilot plan switches to GitHub AI Credits priced per token. Code completions stay free. Fallback models and credit rollover do not.
AI·
Microsoft and OpenAI just rewrote their deal. Exclusivity is dead, and so is the AGI clause.
Microsoft loses exclusive rights to OpenAI's models. The revenue share now caps at 2030 and stops depending on AGI. Here's what actually changed and who it benefits.
Security·
Microsoft April 2026 Patch Tuesday: 167 fixes, two zero-days, and a SharePoint bug already in CISA's KEV
Microsoft's April 8 Patch Tuesday closes 167 CVEs. CVE-2026-32201 in SharePoint is being exploited and CISA added it the same day. Here's what to patch first.
AI·
OpenAI's Privacy Filter is a 1.5B PII redactor that ships under Apache 2.0. Here's what it actually does.
OpenAI released Privacy Filter on April 22 as an open-weight on-device model for masking eight types of PII. F1 of 96%. Runs in a browser. Here's the catch.
Open Source·
Ubuntu 26.04 LTS ships Wayland-only, Rust coreutils, and post-quantum SSH by default
Canonical released Ubuntu 26.04 'Resolute Raccoon' on April 23. It's the first LTS without X11, ships kernel 7.0 and GNOME 50, and sets post-quantum SSH on by default.
Security·
Microsoft rushed an out-of-band ASP.NET Core patch. If you shipped between April 14 and April 21, you need to rebuild.
CVE-2026-40372 lets attackers forge auth cookies on .NET 10.0.6 apps on Linux and macOS. The fix is 10.0.7. Here's what broke, who's exposed, and how to patch.
Open Source·
Mozilla fixed 271 Firefox bugs that Claude Mythos found. Its own tests caught 22.
Firefox 150 shipped Monday with 271 security fixes from Anthropic's Project Glasswing. Mozilla CTO Bobby Holley says Mythos matches elite human researchers.
AI·
GitHub Copilot paused new signups and kicked Opus out of Pro. Here's what actually changed.
GitHub froze Copilot Pro/Pro+/Student signups on April 20 and moved Claude Opus 4.7 behind the $39 Pro+ tier. Agent workflows broke the old math.
AI·
NSA is running Anthropic's Mythos. The Pentagon says Anthropic is a supply-chain risk.
Axios reports the NSA is using Anthropic's unreleased Mythos model even though the Defense Department has blacklisted Anthropic. One government, two positions.
Security·
Trivy got hijacked: 75 of 76 version tags rewrote to drop a CI secret-stealer
Attackers force-pushed 75 of 76 trivy-action tags to a malicious commit. Pinning by tag turned a trusted scanner into an infostealer for CI pipelines.