Microsoft bundles chat, coding, and agents into a Copilot super app

Microsoft unveiled a redesigned Copilot app that folds chat, coding, and background agents into three tabs called Home, Code, and Autopilot. Home pairs Copilot Chat and Cowork with a Today dashboard for mail, meetings, and Teams threads, Code generates shareable cloud-hosted internal apps with GitHub Copilot technology running sandboxed inside a customer’s tenant, and Autopilot — previously named Scout — operates as a cloud-based teammate with its own identity, memory, computer, and workspace that can be @mentioned in Teams, Outlook, and documents.

Cowork, Code, and Autopilot will bill on usage, while the standard Copilot license continues to cover Chat and the Office apps, according to launch-day reporting quoting Microsoft’s Jared Spataro; Microsoft’s own announcement page could not be independently loaded from this network, so feature scope and pricing should be read as the company’s stated plans via that reporting.

Featured source: The Verge , Microsoft .

Other Stories

SalesBleed flaws allowed 0-click theft from Agentforce CRM data

Zenity Labs found three Agentforce flaws, collectively called SalesBleed, in which a poisoned Web-to-Lead submission lay dormant until an employee asked the agent about leads, then directed it to query account records and embed the results in image URLs or Slack link previews that exfiltrated data without a click. A related flaw in replying to Slack threads permitted messages without user confirmation or visible attribution, enabling phishing under the agent’s identity.

Salesforce was notified June 1, acknowledged work on fixes June 2, and Zenity confirms all chains were fixed by September 21, so the specific attacks no longer work; Zenity cautions the pattern could affect any agent that ingests outside records while holding sensitive tool access.

Filed from: The Register .

File-event side channels leak activity across four operating systems

Researchers at Graz University of Technology report decades-old flaws in Linux inotify, Android FileObserver, Windows ReadDirectoryChangesW, and macOS FSEvents that expose file-event metadata usable to infer keystrokes, site visits, and app activity without revealing file contents. Reported results include 93.1–100 percent local keystroke accuracy and 100 percent over SSH on Linux by watching /dev/input, plus 97.8 percent Firefox-visit identification on Windows, with details summarized at inoti.fyi.

The Linux issue, tracked as CVE-2025-68788, was partly fixed in December 2025 kernel branches by suppressing events on special files in /dev/, while Android had no mitigation at disclosure, Apple supplied the least information, and Microsoft called the Windows behavior by-design; the full paper is scheduled for ACM CCS 2026 in The Hague.

Filed from: The Register , Paper summary .

Oracle sends force majeure notice on New Mexico Stargate campus

Oracle sent a force majeure notice to the developer of Project Jupiter, a 2.45-gigawatt Stargate campus in New Mexico, in a move first reported by Bloomberg. The notice could let Oracle delay payments if the site misses its 2028 target, though Bloomberg’s sources say Oracle is not seeking to exit as main tenant, and Oracle and financier Blue Owl Capital say commitments are unchanged.

The notice follows energy setbacks including a nearly six-month pipeline delay to February 1, 2027 and a pending air-quality decision due November 23 on a Bloom Energy fuel-cell system, leaving unresolved whether the contractual step reflects material schedule risk or precautionary positioning.

Filed from: TechCrunch .

New Jersey fines Vineland data center $1.1 million over gas generators

New Jersey ordered DataOne to pay $1.1 million for installing and running 62 gas generators at its Vineland data center without air permits, described as the state’s largest data-center enforcement. Reporting by The Guardian and Floodlight News shared thermal drone footage showing 45 units operating at 1,982-kW capacity, far above the 37-kW permitting threshold, with regulators citing nitrogen oxides and carbon monoxide risks.

DataOne has 45 days to seek permits or stop operating the units but may run them while applying; the company disputes the fine and promises permit applications plus a longer-term shift to fuel cells, leaving open how much unpermitted operation affected nearby homes, farmland, and two schools.

Filed from: Ars Technica .

Microsoft pledges more than $10 billion for the Middle East

Microsoft plans to spend over $10 billion through 2030 across the UAE, Saudi Arabia, Qatar, and Kuwait on cloud and AI infrastructure, resilience, cybersecurity, and education. The plan adds $400 million for subsea and terrestrial cables by decade’s end, extending SeaMeWe-6 interests, alongside stated attention to clean energy and water replenishment.

The figures come from reporting on Microsoft President Brad Smith’s September 23 post; the Microsoft page itself could not be independently loaded from this network, so timelines and project scope should be read as stated plans rather than completed investment.

Filed from: TechRadar , Microsoft .

Cloudflare’s Turnstile Spin hands full setup to coding agents

Cloudflare launched Turnstile Spin, an agent-mediated flow that creates the widget, embeds it, and wires server-side Siteverify checks into backend code, including repairs for widgets that served traffic without validation and migrations from other CAPTCHAs. The user’s own agent makes approved edits locally while validation stays in the backend, with Cloudflare reporting about three billion verifications on a typical weekday and 65,000 Spin-created widgets since July alongside 30,000-plus prompt copies.

Those adoption figures are Cloudflare’s own and remain unverified independently; setup entry points include the dashboard, Wrangler, and a public skill for agents.

Filed from: Cloudflare .

Cloudflare fixes cross-tenant disk-data exposure in Containers

External researchers at Accomplish, led by Oren Yomtov, reported September 4 through Cloudflare’s bug bounty that Containers could expose residual disk blocks from prior tenants when thin-provisioned storage reused 64 KiB blocks without zeroing. A Workers Paid account could recover leftover bytes by writing small aligned blocks into fresh regions and reading surrounding data, though the technique could not target a specific customer or workload.

Cloudflare says it remediated the fleet with no customer changes required and found no evidence of malicious exploitation in available telemetry, with attributable activity limited to the researchers and authorized validation; the write-up was prepared jointly with Accomplish.

Filed from: Cloudflare .

Gravity Linux lands an accelerated M4 Mac mini alpha with LLM-built drivers

Gravity Linux, a Fedora remix forked from Asahi Linux over its ban on generative-AI contributions, released a developer alpha that boots an accelerated desktop on the M4 Mac mini with OpenGL ES 3.0 and OpenGL 3.3 support. HDMI works while USB-C displays, USB4, Thunderbolt, suspend, and full power management do not, and the project warns against daily use.

Leads Cody Ho and Niklas Sheth say a custom hypervisor and M4 GPU driver came together in about a month through largely unattended LLM loops under a clean-room rule that treats anyone whose model session viewed Apple disassembly as tainted for that component; performance and hardware claims await independent reproduction.

Filed from: The Register , Gravity Linux .

Amazon UK sellers report stock trapped by pending orders

Sellers on Amazon’s UK marketplace describe a wave of abnormal pending orders since September 20, concentrated on goods priced at £100 or more, locking entire stocks so genuine buyers cannot check out. Reports cite volumes far above norms, including 30 pending orders in about 52 hours and 72 orders worth roughly £25,000 in three days, with some vendors suspecting bogus orders that reserve inventory without payment.

Whether the episode reflects deliberate locking or a platform glitch was unresolved at publication: Seller Support reportedly called cases normal, Amazon had issued no official statement, and a forum message posted after press contact said the matter was escalated to partner teams, with timing that may have been coincidental.

Filed from: The Register .

Google to fly Trillium TPUs on October 1 orbital test

Google plans to fly Trillium TPUs aboard SpaceX’s Transporter-18 Falcon 9 rideshare on October 1 as an early Project Suncatcher check on launch survival and orbital operation for solar-powered compute. The company cites vibration, proton-beam work at UC Davis’ Crocker Nuclear Laboratory, and vacuum-chamber cooling tests, while flagging 50–100 gravities at launch, radiation upsets and cumulative damage, and roughly 1.3 square meters of radiator per TPU since vacuum cooling relies on radiation alone.

Google frames the flight as a moonshot without a space-rated TPU, aimed at finding failure modes before laser interconnects and launch economics are addressed; analysts remain skeptical, so orbital training and inference stay experimental rather than imminent.

Filed from: The Register .

Lovable claims $600 million revenue run rate on vibe coding

Lovable co-founder Fabian Hedin said at Amsterdam’s HumanX summit that the vibe-coding platform crossed a $600 million annualized run rate, up from about $500 million in June. Hedin claimed users at two-thirds of Fortune 500 companies use the product, named Microsoft, Nvidia, and Deutsche Telekom as customers, and said user-built apps draw nearly a billion monthly visits.

The revenue, customer-penetration, and traffic figures are the company’s own claims and remain unverified; separately, Lovable has raised over $700 million across two rounds eight months apart, most recently $400 million in August at a reported $13.3 billion valuation.

Filed from: TechCrunch .

Databricks buys Row Zero and signals more acquisitions

Databricks acquired Row Zero, an early-stage cloud spreadsheet startup, after its own finance team combined the tool with the Genie AI agent for natural-language data questions. The pitch keeps secure enterprise data in Databricks storage while analysts work through familiar spreadsheet interfaces rather than exporting copies, with deal terms undisclosed.

CEO Ali Ghodsi told TechCrunch the company intends many more similar acquisitions; Databricks closed $5 billion in funding in August at a $7 billion revenue run rate and bought Quotient AI, SiftD.ai, Panther, and Electric’s PGlite in recent months, according to the report.

Filed from: TechCrunch .

From the Community

Researchers detail full exploitation of an Avast antivirus kernel flaw

Researchers at Safa Team published the second part of their analysis of CVE-2025-13032, a double-fetch vulnerability in an Avast kernel driver that they exploited on an up-to-date Windows 11 system. The write-up traces a paged-pool overflow into arbitrary kernel read/write by corrupting an I/O Ring object’s RegBuffers array, using a heap spray, an address leak via MDL introspection, and teardown repairs to avoid crashing, then escalating to SYSTEM through token theft.

The authors note that newer Windows kernels and drivers use user-mode accessors that validate kernel access to user memory, a mitigation they say blocks the described technique.

Filed from: Safa Team technical article .

git-bug keeps issue tracking inside the repository

git-bug is a distributed bug tracker that stores issues as Git objects, so bugs travel over the same remotes as code and stay readable offline without a separate service. It ships a CLI, terminal UI, and local web UI from one Go binary, plus a GraphQL API and bridges importing from and exporting to GitHub, GitLab, Jira, and Launchpad.

The project is GPLv3-or-later with a published on-disk format spec; the maintainers caution the web UI is not yet ready as a public portal for external contributions.

Filed from: git-bug repository .

Historian reports frontier models surfacing new findings in early modern archives

A historian of science writes that pairing GPT-6 and Opus 5.5 with digitized collections produced results he considers genuinely new, including identifying a Latin alchemical passage Newton translated from a French text and finding parallel anagrams by Newton and Samuel Hartlib for Hungarian vitriol. He argues models help most where experts frame tractable problems over digitized, multilingual, checkable sources, and urges labs and funders to back systematic collaboration with historians and archivists.

Much of the work is in progress, self-reported, and not peer-reviewed, and two 16th-century Spanish letters the model partly deciphered had already been solved in the 1530s and 1916.

Filed from: Res Obscura .

GNOME and KDE wrestle with LLM contribution policies

A commentary surveys the dispute over LLM rules in GNOME and KDE, reporting that KDE’s LLM-friendly draft was deleted after heated response while several GNOME teams adopted their own rules and an informal draft would ban LLM contributions to GNOME projects and infrastructure. The author frames the split as whether free software is primarily collective effort or a product to finish as efficiently as possible.

The piece is explicitly opinionated and does not link the underlying drafts, so specific policy claims should be checked against the projects’ own records.

Filed from: diegoe.be .