Back to updates

2026-06 - 6

2026 (12)

June (12)

security: AutoJack: How a single page can RCE the host running your AI agent

Microsoft Security Blog

2026-06-19

Microsoft describes AutoJack, an exploit chain where a single malicious webpage can cause remote code execution on the host running an AI browsing agent. The attack abuses localhost trust, missing authentication, and unsafe parameter handling in AutoGen Studio’s MCP WebSocket.

github: Upcoming deprecation of Opus 4.6 (fast)

GitHub

2026-06-18

GitHub will deprecate Opus 4.6 (fast) across all Copilot experiences on June 29, 2026. This includes Copilot Chat, inline edits, ask and agent modes, and code completions.

ai: Outcome-driven learning systems: Enterprise RL with OpenEnv and Foundry

Microsoft AI Foundry Blog

2026-06-18

Microsoft says its Build 2026 Foundry releases fit together as an outcome-driven learning system for enterprise reinforcement learning, centered on OpenEnv and Foundry. The post positions hosted agents, Toolboxes, Foundry IQ, Memory, Managed Compute, fine-tuning, Frontier Tuning, and a new evaluation/optimization stack as supporting pieces of that system.

github: MAI-Code-1-Flash available on more Copilot surfaces

GitHub

2026-06-18

MAI-Code-1-Flash is now available in additional GitHub Copilot surfaces. The model can be used in Copilot CLI, the GitHub Copilot app, Copilot Chat on GitHub, and Visual Studio Code.

security: New Forrester study shows customers who unified with Microsoft Security benefited from 124% ROI

Microsoft Security Blog

2026-06-18

Microsoft cites a new Forrester Total Economic Impact study saying organizations that consolidated on Microsoft Security saw a 124% ROI, lower risk, and improved readiness to secure AI. The post is a summary announcement and does not include detailed methodology or product changes.

github: Copilot code review: AGENTS.md support and UI improvements

GitHub

2026-06-18

Copilot code review now reads repository-level AGENTS.md files and adds a Request button to make it easier to ask Copilot for a review on draft pull requests. GitHub says these updates are generally available.

github: Detecting Duplicate Issues – Public Preview and issue fields MCP support for GitHub Issues

GitHub

2026-06-18

GitHub Issues adds duplicate issue detection in public preview and expands MCP support for issue fields. The change is aimed at reducing duplicate triage work for maintainers, especially in large repositories.

github: Copilot-authored pull requests now included in author searches

GitHub

2026-06-18

Pull request searches using the `author:` qualifier now include pull requests opened by the Copilot cloud agent on a user’s behalf. For example, `author:@me` on GitHub pull requests will return those Copilot-authored PRs as well.

github: Repository switcher generally available in global navigation

GitHub

2026-06-18

GitHub’s repository switcher in global navigation is now generally available. It lets you jump between repositories without leaving the current page.

github: Actions: Build custom images from custom images

GitHub

2026-06-18

GitHub Actions custom images now support building one custom image from another. This adds flexibility for composing and managing image-generation pipelines for GitHub-hosted runners.

github: Safer pull_request_target defaults for GitHub Actions checkout

GitHub

2026-06-18

GitHub is changing the default behavior of the Actions checkout action for workflows triggered by `pull_request_target` to reduce common security mistakes. The goal is to avoid exposing base-branch credentials or secrets to untrusted pull request code.

github: Control who and what triggers GitHub Actions workflows

GitHub

2026-06-18

GitHub Actions now has workflow execution protections in public preview for GitHub Enterprise, organizations, and repositories. Administrators can define allow lists to control which users or events can trigger workflows.