Microsoft's AI story: Copilot family launches across Office, GitHub, and Windows; Azure OpenAI and AI Foundry updates; Fortune 500 partnerships; and the strategy behind it.
Topic brief
Brief updated Aug 6, 2026
Microsoft is one of the largest distributors of AI capability to enterprises, combining its Azure cloud infrastructure, the Microsoft 365 Copilot productivity assistant, GitHub Copilot for developers, and a growing set of its own MAI models alongside partner models from OpenAI, Anthropic, Mistral AI and open-weight labs. For data scientists and ML engineers, Microsoft is significant less as a single model vendor and more as the platform layer where many organizations first encounter production AI, whether through Copilot in Word and Excel, agent orchestration in Copilot Studio, or model hosting in Microsoft Foundry.
Under CEO Satya Nadella, Microsoft has been pushing two ideas that shape how practitioners should think about the platform: that enterprises should treat AI model choice as a portfolio decision rather than a single-vendor bet, and that firms risk giving away proprietary knowledge to AI vendors through ordinary product use unless they establish their own data and orchestration boundaries. Both ideas are playing out concretely as Microsoft routes some Office AI prompts to its own MAI models while simultaneously expanding partner-model access inside the same Copilot surfaces.
The company is also one of the largest builders of AI infrastructure, which brings its own reporting obligations, energy and community constraints, and it is increasingly selling governance and deployment labor as products through offerings such as Agent 365, the Microsoft 365 E7 Frontier Suite and the Microsoft Frontier Company consulting unit.
Microsoft's July 29 fiscal fourth-quarter report is the clearest recent statement of how the company is financing and pricing AI, and one number outside it now reframes the rest. It reported $90.0 billion in quarterly revenue, up 18%, Azure and other cloud-services growth of 43%, full-year Azure revenue past $100 billion, and more than 30 million paid Microsoft 365 Copilot seats, against $41 billion of capital expenditures in the quarter, roughly two-thirds of it on short-lived assets such as CPUs and GPUs. Microsoft also lowered expected reported calendar-2026 capex to about $175 billion from the roughly $190 billion it gave in April, attributing the change to a shift of future datacenter leases from finance leases to operating leases rather than to a smaller buildout, and said September-quarter capex should exceed $50 billion. Bloomberg then reported that Microsoft recorded $24.1 billion in sales from OpenAI during the year ended in June, accounting for most of its AI revenue under new disclosures, a figure the July 29 earnings release does not state; Nadella's previously cited $37 billion annualized AI run rate covers a different period, so the two should not be compared directly. Concentration of that kind gives the cost story a sharper edge, and cost pressure is already visible in model selection: Microsoft said on July 23 that Bing Image Creator runs end to end on MAI-Image-2.5 and that PowerPoint image-to-image features use up to 84% less GPU capacity than GPT-Image-2, and said on July 27 that an MDASH configuration pairing its new MAI-Cyber-1-Flash model with GPT-5.4 scored 95.95% on CyberGym at nearly 50% lower cost than its previous best setup. For anyone building or buying on these surfaces, the practical reading is that the model behind a familiar Copilot feature is now a routed, cost-driven choice, and Microsoft's own July 6 test of 150 Copilot Chat agent runs, where Claude Sonnet 5 cost $2.01 per code-upgrade run against $0.55 for Sonnet 4.6, shows that a cheaper rate card does not guarantee a cheaper run.
The governance layer is arriving on a slower clock than the distribution layer. Security researcher Håkon Måløy disclosed on July 28 that hidden instructions in a Word document could alter Copilot-assisted output and copy themselves into the generated file, and said the broader class remained reproducible after 144 days of coordination and two mitigation attempts; Microsoft told The Register it had addressed the reported findings and continues to strengthen layered safeguards. Manifold Security's July 21 disclosure showed hidden HTML comments in Azure DevOps pull-request descriptions reaching AI agents through Microsoft's official MCP server, and a July 27 check found the public repository's pull-request path still returning the description without the spotlighting wrapper. Barracuda published a controlled proof of concept on August 4 in which an attacker who already controlled an employee mailbox used Microsoft Copilot to find targets, imitate trusted colleagues and escalate to a CEO account, redirecting a simulated $247,500 wire transfer; that was a laboratory scenario, not a disclosed customer breach, and the assistant accelerated use of access the compromised account already had. Microsoft's counterweights are real but partial: a Purview Data Loss Prevention rule that excludes externally received email from Copilot grounding, summarization and citation is only in preview with general availability listed for January 2027, and it evaluates sender-domain metadata rather than message bodies; an update to Restricted Content Discovery reported on August 5 stops recently accessed files from RCD-protected SharePoint sites from resurfacing through Microsoft Search and Copilot discovery, with existing configurations applying without administrator action. Microsoft is also buying outside scrutiny, awarding more than $20 million to 562 researchers from 64 countries in the year ended June 30 and funding 18 university labs through the EXTRA red-team alliance. Teams standardizing on Copilot and agent surfaces should still treat repository text, partner documents and inbound email as untrusted input today, and evaluate controls at the feature level rather than assuming a tenant-wide switch exists.
Several dated items are checkable in the near term. Microsoft said Project Perception, its red, blue and green agent security system, entered public preview on August 3, 2026, and the announcement does not list preview workflows, permission and approval configuration, evidence handling, or how agent actions are audited or reversed, so watch for that documentation. The Purview DLP control for external email is listed as Microsoft 365 roadmap item 561552 with preview in June 2026 and general-availability rollout starting January 2027; Microsoft notes DLP policy updates can take up to four hours to appear in Copilot experiences. On the Azure DevOps MCP server, watch whether a tagged release after version 2.8.0 from June 24 applies the createExternalContentResponse wrapper to the pull-request path; Manifold Security says Microsoft acknowledged and triaged the report through MSRC, and the evidence does not establish the status of any nonpublic remediation, an assigned CVE, or exploitation outside the researchers' testing. On spending, Microsoft said it expects September-quarter capex above $50 billion and fiscal-2027 capex growth year over year, so the next earnings report will show whether the lease reclassification that cut reported calendar-2026 capex to about $175 billion continues to separate reported capex from underlying commitments, and whether Microsoft updates the $37 billion AI run-rate figure now that Bloomberg has put $24.1 billion of OpenAI sales against it. Also watch whether Microsoft documents which Microsoft 365 workloads run on MAI models and exposes tenant-level controls, an open question the July 7 Bloomberg reporting raised; whether the multibillion-dollar Mistral compute commitment produces disclosed capacity or pricing; and whether Manulife or Microsoft publish measured results against Manulife's company-reported target of more than C$1 billion in enterprise value by 2027.
It depends on the workload, and the mix is shifting. OpenAI said GPT-5.6 became the preferred Microsoft 365 Copilot model across Word, Excel, PowerPoint, Chat and Cowork; Microsoft added Claude Sonnet 5 on July 2 for Copilot Cowork and PowerPoint subject to tenant policy; and Microsoft has moved Bing Image Creator, PowerPoint image-to-image and OneDrive editing workflows to its own MAI-Image-2.5. Bloomberg reported on July 7 that tens of thousands of weekly Excel and Outlook prompts are already completing on MAI models. Microsoft has not published a per-workload map or tenant-level control for MAI routing, so treat Copilot as a model portfolio and evaluate output quality per task rather than per product.
Not necessarily. Microsoft ran 150 Copilot Chat agent runs across architecture and SharePoint upgrade workloads comparing Claude Sonnet 4.6 with Sonnet 5 and found that Sonnet 5, despite lower per-token pricing, used many more tokens on some workloads and cost $2.01 per code-upgrade run against $0.55 for Sonnet 4.6. It also improved some completion results. The practical conclusion is that model swaps in production agents need regression tests covering cost variance, completion rate, quality and outlier behavior before rollout, not just a rate-card comparison.
Demonstrated, though so far in research rather than reported in-the-wild compromise. Håkon Måløy showed hidden instructions in a Word document altering Copilot-generated output and copying themselves into new documents, and says the broader class remained reproducible after 144 days and two mitigation attempts; Microsoft told The Register it had addressed the reported findings. Manifold Security showed hidden HTML comments in Azure DevOps pull-request descriptions reaching agents through the official MCP server, using a reviewer's broader credentials for cross-project actions and data exfiltration, with a July 27 check finding the pull-request path still returning descriptions without the spotlighting wrapper. Treat repository text, partner documents and inbound email as untrusted input, and constrain what tools an agent can invoke with a reviewer's permissions.
Two relevant ones, both narrow. A Purview Data Loss Prevention rule in preview can exclude email received from external domains from Microsoft 365 Copilot and Copilot Chat grounding, summarization and citation; it checks sender-domain metadata against the tenant's accepted domains rather than inspecting message bodies, and general availability is listed for January 2027 under roadmap item 561552. Separately, a Restricted Content Discovery update reported on August 5 stops recently accessed files from RCD-protected SharePoint sites from resurfacing through Microsoft Search and Copilot discovery, with existing RCD configurations applying without administrator action. The generalizable lesson is that recent-item and recommendation surfaces are separate retrieval paths from the primary index and need their own tests.
No. Microsoft said on July 29 that its underlying calendar-2026 infrastructure investment expectations are unchanged, and that the drop in expected reported capital expenditures to about $175 billion, from roughly $190 billion given in April, reflects moving future datacenter leases from finance leases to operating leases. Fiscal fourth-quarter capex was $41 billion, roughly two-thirds of it on short-lived assets such as CPUs and GPUs, and Microsoft expects September-quarter capex above $50 billion and fiscal-2027 capex growth year over year. Read the reported figure as an accounting presentation change, not a demand signal.
Yes. Microsoft's AKS engineering team published a reference implementation on June 29 that separates agent-request routing into three distinct decisions: which model answers, how traffic is governed, and which GPU replica serves the request. RouteLLM selects the strong or weak path, agentgateway applies policy, and the Gateway API Inference Extension Endpoint Picker uses live vLLM state for replica placement, with KAITO and Azure OpenAI behind a single OpenAI-compatible endpoint. It is a worked open-source architecture rather than a managed product, so adopters need to validate component versions, the routing threshold, identity controls and internal networking themselves.
Latest coverage
Showing newest first with full-topic pagination
Microsoft has published release notes for Windows 11 Insider Experimental (Future Platforms) Preview Build 29648.1000, a documentation update dated August 17. The preview covers configurable unified-memory behavior for supported graphics and on-device AI workloads; Windows Latest reported the change on August 21, while general availability remains unannounced.
Clifford Chance launched an internal AI-enabled knowledge management platform in July, developed with Epiq Advisory for Law Firms and Microsoft. Global Legal Post reports that the library contains more than 400,000 curated, access-controlled documents and includes permissioned search designed to preserve client confidentiality. The system runs within the firm's Microsoft 365 and Azure environment.
Microsoft's Business Central 2026 release wave 1 put an Admin Center MCP server into public preview on April 1, 2026. The company's documentation says MCP-compatible AI agents can retrieve environment information and propose actions such as sandbox copies or update scheduling through standardized administration APIs, with explicit user confirmation retained for follow-up actions.
Varonis Threat Labs disclosed CoSnitch on August 18, a one-click chain in Microsoft Copilot Personal combining automatic prompt execution, data exfiltration through connected apps and persistent memory poisoning. Varonis says Microsoft received the report in December 2025 and shipped patches on August 18; the researchers found no evidence of exploitation in the wild.
GitHub's August 13 Copilot changelog adds Kimi K3 and MAI-Code-1.1-Flash, per-turn model switching in VS Code Claude sessions, and new agent tooling, according to DevOps.com. The update also extends Copilot CLI capabilities and introduces Agent Plugins 1.0 across Copilot surfaces. DevOps.com frames the release around model choice, while raising governance questions about tracing model contributions to generated code.
Microsoft explained on August 13 that Exchange Server Subscription Edition Cumulative Update 1 remains delayed as its team validates, reproduces, fixes, and tests security issues found with AI tools. The Register reports that CU1 was first targeted for the first half of 2026 and later shifted to the second half, but Microsoft has not given a release date. Monthly security payloads continue to be integrated into the internal CU1 build.
Microsoft says Outlook Classic builds 20026.20182 and later can lose Copilot Chat and Copilot entry points for users with either Basic or paid Microsoft 365 Copilot licenses. A support page updated August 5 says the Outlook team is investigating; affected users can still use Copilot through new Outlook, Outlook on the web or the standalone Microsoft 365 Copilot app.
Microsoft says Mico, the animated character in Copilot Voice, is moving to its Learn Live tutoring experience as accounts transition to an updated Copilot. The change starts in August 2026 and will roll out in waves; Copilot Voice will remain available, but Mico will no longer appear in standard voice conversations after an account updates.
BloombergNEF calculated that Microsoft bought 8.55 million metric tons of carbon-removal credits through mid-July 2026, about 80% less than in the same period of 2025 and its first market retreat since 2023. Microsoft's July sustainability report says total Scope 1, 2 and 3 emissions rose 25% year over year, driven mainly by datacenter expansion and a pause in certain renewable-energy certificates.
Microsoft will make passkeys the default Entra ID authentication experience on September 1, 2026, then retire Microsoft-provided SMS and voice delivery on February 1, 2027. Users left with only those phone methods must register a passkey to continue after the cutoff, while organizations that still need them can use customer-managed telecom providers through the Microsoft Security Store.
ZoomInfo says its GTM.AI connector lets eligible mutual customers bring ZoomInfo business data into Microsoft Copilot Studio and supported Microsoft 365 and Dynamics 365 experiences. MarTech Series published a Business Wire announcement on August 12, while ZoomInfo's own connector page predates that coverage. Access depends on ZoomInfo and Microsoft licensing, administrator approval, and configured agents.
Rapid7 and Microsoft disclosed CVE-2026-63520 on August 11, completing a two-vulnerability SharePoint Server chain that can reach unauthenticated remote code execution when paired with July's CVE-2026-55040 authentication bypass. The new flaw carries a CVSS score of 8.1, and Microsoft published fixes for supported on-premises SharePoint editions.
Windows Latest reported on August 8 that Microsoft 365 Copilot users in classic Outlook for Windows can select text in an email and invoke an “Explain This” control for a contextual explanation. Microsoft announced the feature in May, but public sources give different rollout-completion dates, so availability may still vary by tenant and update channel.
Microsoft announced the AI Gateway tier of Azure API Management in public preview on July 27, providing a dedicated control plane for publishing and governing models, MCP servers, and tools. According to Microsoft's Azure Integration Services blog, the tier uses portal policy cards rather than XML expressions and supports model backends across Microsoft Foundry, AWS Bedrock, Google Vertex AI, OpenAI, and Anthropic.
Rubrik Zero Labs described an exploit chain at Black Hat USA 2026 in which a poisoned Word document progressed from prompt injection to an escape from a Microsoft Copilot sandbox. Forkast ties the path-traversal stage to CVE-2026-32193, while SiliconANGLE reports that Microsoft fixed the demonstrated flaw before the research became public.
Microsoft opened its India South Central cloud region in Hyderabad on August 6, 2026, bringing its Indian cloud-region count to four. India Today reported Adani Group and HDFC Bank among the early users, while Microsoft's current Azure documentation identifies Hyderabad as the region's physical location and lists support for availability zones.
Microsoft recorded $24.1 billion in sales from OpenAI during the year ended in June, Bloomberg reports, accounting for most of the company's artificial intelligence revenue under new disclosures. Bloomberg also reports that CEO Satya Nadella had cited a $37 billion annual AI revenue run rate at the end of the March quarter, while Microsoft did not update that total in its latest earnings release.
Microsoft is deploying updates to Restricted Content Discovery (RCD) for Microsoft 365 Copilot, according to a July 14 Message Center notice reported by Office 365 IT Pros. The changes stop recently accessed files from RCD-protected SharePoint sites from resurfacing through Microsoft Search and Copilot discovery paths, while existing RCD site configurations remain in effect without administrative action.
A Microsoft 365 user with an active subscription reported an "Upgrade your plan" banner in Office, and a Microsoft Q&A Independent Advisor said on July 9 that there was no supported option to hide it. The answer is not an official Microsoft product announcement, so the evidence supports a UI-control gap—not the seed report's claim that Microsoft formally admitted the banner was intentional.
Microsoft said on August 3 that its bounty programs awarded more than $20 million to 562 security researchers during the year ended June 30, 2026, both program records. Researchers from 64 countries submitted findings across Microsoft products, while the company's Zero Day Quest accounted for $2.3 million of the total.
Barracuda published an August 4 controlled proof-of-concept showing how an attacker who already controls an employee mailbox could use Microsoft Copilot to find targets, imitate trusted colleagues and escalate to a CEO account. The laboratory scenario redirected a simulated wire transfer; it was not a disclosed customer breach or real financial loss.
Microsoft's fiscal 2026 fourth quarter and Meta's 2026 second quarter, both reported July 29, showed different financial pressures around AI infrastructure. Microsoft spent $41 billion on capital expenditures as Azure revenue grew 43%; Meta spent $31.08 billion, while free cash flow fell to $784 million from $8.55 billion. Meta's profit decline also reflected $2.4 billion in legal charges and $1.18 billion in severance, so it cannot be attributed to AI spending alone.
Microsoft said on July 29 that its underlying calendar-2026 infrastructure investment plan remains unchanged, but a shift of future datacenter leases from finance leases to operating leases lowers expected reported capital expenditures to about $175 billion. The company recorded $41 billion of capex in its June quarter and expects more than $50 billion in the September quarter, including the lease-reclassification effect.
Security researcher Håkon Måløy disclosed on July 28 that hidden instructions in a Word document can influence Copilot-generated output and copy themselves into new documents. Måløy says the broader prompt-injection class remained reproducible after 144 days of coordination and two mitigation attempts; Microsoft told The Register that it had addressed the reported findings and continues to strengthen layered safeguards.
Microsoft's AKS engineering team published a reference implementation on June 29 that separates agent-request routing into three decisions: which model answers, how traffic is governed, and which GPU replica serves the request. The design combines RouteLLM, agentgateway, the Gateway API Inference Extension, KAITO and Azure OpenAI behind one OpenAI-compatible endpoint.
Microsoft made a Purview Data Loss Prevention control available in preview that can stop Microsoft 365 Copilot and Copilot Chat from using email received from external domains. The policy checks sender-domain metadata and excludes matching email from grounding, summarization, and citation; it does not inspect the message body. Microsoft lists the general-availability rollout for January 2027.
Microsoft announced the External Red Team Alliance (EXTRA) on July 27, funding 18 university labs across six continents through unrestricted gifts and building a separate network of external specialists for AI red teaming. The two-part initiative is intended to broaden safety and security testing across technical domains, languages, cultures, and regions that Microsoft says internal teams cannot fully cover alone.
Microsoft announced MAI-Cyber-1-Flash inside its MDASH vulnerability system and introduced Project Perception on July 27, with the agentic security system entering public preview on August 3. Microsoft reports that the new MDASH configuration scored 95.95% on CyberGym and costs nearly 50% less than its current best configuration; those vendor-run comparisons have not been independently replicated.
BlueQubit and research partners received U.S. Department of Energy Genesis Mission grants totaling $1.5 million for projects applying AI and high-performance simulation to quantum error correction. Announced July 22, the work targets physical-qubit overhead and real-time decoding latency through collaborations spanning Microsoft, national laboratories, and six universities. The funding supports early research toward fault-tolerant systems, not a finished practical quantum computer.
Microsoft said on July 23 that Bing Image Creator is now powered end to end by MAI-Image-2.5, while PowerPoint uses the model for image-to-image features and OneDrive uses it for key editing workflows. The company reported up to 84% lower PowerPoint GPU costs than GPT-Image-2, highlighting cost and product fit as drivers of its shift from OpenAI image models.
