The AI Wire ●

Microsoft announced on Thursday the launch of Copilot for legal, a set of more than 20 purpose-built legal skills for its Copilot assistant. The offering ships as a pair of plugins, one for Microsoft Word and one for Microsoft Cowork, its agentic product that performs tasks across Microsoft applications.

Copilot for legal evolves features first unveiled as part of Microsoft's Legal Agent in April. It is a further move by Microsoft into legal tech, a vertical where dedicated AI vendors and law-firm-built tools have been competing hard for document and research work.

The launch continues Microsoft's pattern of packaging Copilot around specific professions rather than selling one general assistant, following this month's Copilot Notebooks and Office-editing updates.

GitHub announced on October 15 that it will deprecate three models across all Copilot experiences — Chat, inline edits, ask and agent modes, and code completions — on November 16, 2026. The models are Claude Opus 4.8, Claude Opus 5 and GPT-5.6 Terra.

GitHub suggests Claude Opus 5.5 as the replacement for both Opus models, and GPT-6.1 Sol or GPT-6 Luna for GPT-5.6 Terra. Under default model enablement, the alternatives are automatically enabled for Copilot Business and Enterprise customers unless an administrator has disabled them.

One exception applies: Claude Opus 4.8 will remain available to individual Copilot subscribers on annual plans so they retain an Opus offering. The three models themselves are not being retired by Anthropic or OpenAI — only the Copilot route to them closes — so teams with pinned model configs should update them before November 16.

Security researcher Johann Rehberger disclosed on October 13 that a single trailing dot in a filename let GitHub Copilot in Visual Studio and SQL Server Management Studio bypass a guardrail meant to stop the agent rewriting its own protected configuration files without user confirmation. The check compared the requested path to protected names such as .mcp.json as plain strings; on Windows, a filename ending in a period is saved without that character, so a name like settings.VisualStudio.json. matched neither blocked name and was then written to the real protected file.

With those files writable, a steered or prompt-injected Copilot could register a malicious MCP server that the IDE launches automatically, or point the copilot ripgrepPath setting at an attacker binary that Visual Studio runs on every text search. Microsoft rated the flaw, CVE-2026-103572, as Important remote code execution at CVSS 8.8, confirmed it on September 16, and shipped the fix in the October 13 Patch Tuesday updates — normalising the path with GetFullPath before the check. Developers should update Visual Studio 2022 to 17.14.42 or later, or Visual Studio 2026 to 18.10.4 or later, and update SSMS in the same pass.

Rehberger reported the flaw on August 4 and noted Microsoft classed it out of scope for a bug bounty despite the severity rating and shipped fix — his third Copilot vulnerability in two months, he said, to be patched without a reward. The pattern is the wider story: the bug was a classic pre-AI path-validation mistake, but what it unlocked was an agent's ability to reconfigure its own tools.

Microsoft's October Patch Tuesday, released October 13, addressed more than 1,400 vulnerabilities — counts put the total at 1,411 to 1,413 depending on how third-party flaws are tallied. That smashes September's record of roughly 1,000 and is more than the company patched in all of 2025.

Microsoft credits AI-assisted scanning, including its multi-model MDASH harness, for finding flaws faster. Most of the fixes were for Windows and Office, with dozens rated critical, and the batch included a Windows Shell flaw reported as already exploited.

Security experts quoted in the coverage urged teams to prioritise by exploitability rather than raw count. Only a small share of this year's Microsoft flaws have landed in CISA's known-exploited list, even as the year-to-date total has passed 4,000.

Microsoft is retiring Themes by Copilot, the AI-generated visual themes in the new Outlook, starting in mid-October 2026. Copilot licence holders will lose the generated themes by late October; a theme already applied stays in place until the user changes it.

The retirement is part of a wider simplification of Copilot inside Outlook. Microsoft has told admins the Outlook Copilot experience will move in October to a simpler, chat-centred design with improved navigation and Work IQ controls, after the feature had spread across a floating button, the ribbon, compose, search and a full chat pane.

Copilot itself is not leaving Outlook: it remains in the ribbon and can be turned off, and drafting and rewriting help in compose stays. The change is Microsoft pulling back a decorative feature and consolidating the surfaces where Copilot can be triggered.

Microsoft unveiled its Azure Maia 300 chip at the OCP Global Summit in San Jose on October 12, the newest step in its plan to rely less on Nvidia and AMD for AI inference. The company says Maia 300 will join Maia 100 and Maia 200 in multigigawatt deployments beginning next year.

Microsoft claims the chip delivers about 40% more tokens per megawatt than leading GPU-based systems, and that a 96-chip rack offers roughly seven times the rack-scale token throughput of Maia 200. Those are company figures, not independent benchmarks.

Maia 200 already runs production workloads including Microsoft 365 Copilot and OpenAI models. If Maia 300 ships on the stated schedule from 2027, Microsoft says its Maia family will become its primary AI inference system for its own products and services.

Update (October 13): Reuters reports Microsoft plans to deploy potentially more than a million Maia 300 chips next year to back its internal AI services. That scale, if it holds, makes Maia core inference infrastructure rather than a side project, in a year when Microsoft expects capital spending above $175 billion.

Microsoft has released Microsoft-Decision-1, a small model built for a narrow job: given a situation, a question and a fixed set of options, it returns a calibrated probability for each option. It is meant for routing, classification, prioritisation, verification and workflow control inside apps and agents.

The model was post-trained from Qwen3.5-9B for single-pass scoring and supports yes/no, multiple-choice, rating-scale and rubric-style grading through API calls. Microsoft says it tested the model across 36 benchmarks covering nearly 150,000 questions, and reports much lower latency than using a frontier model for the same scoring work.

Microsoft-Decision-1 is available through Microsoft Foundry and OpenRouter, priced at $0.042 per million input tokens in the launch reporting. It is not a chat model: Microsoft is explicit that it is not designed for open-ended generation, conversation or summarisation.

Microsoft has announced five Copilot additions for Excel, rolling out through October 2026. Interactive Canvas turns workbook data into a live, interactive report or dashboard from a natural-language prompt, and the report stays connected to the workbook so it updates when the underlying data changes.

Two of the additions are about teaching Copilot repeatable work. Skill Builder creates a reusable skill from a described workflow, instructions or examples, while Skill Recorder captures actions a user performs in Excel and turns them into a reusable skill. Skill Builder is due to become generally available in October; Skill Recorder reaches Microsoft 365 Insiders by the end of the month.

The remaining pair handle data preparation. Get Data lets users describe the data they need and where it should come from instead of building a query by hand, and Clean Data flags problems such as duplicates, inconsistent formatting and mixed data types. Interactive Canvas is available first to Microsoft 365 Insiders.

In a BBC interview published October 12, Microsoft president Brad Smith argued that AI systems face fewer safety requirements than everyday consumer products such as milk cartons and washing machines. He said voluntary self-regulation is no longer enough at the current scale of deployment.

Smith set out five proposals: global safety rules that apply across jurisdictions, mandatory incident reporting, notification for victims when a system is breached or misused, independent evaluators reviewing some products before release, and an emergency-brake mechanism for halting a dangerous system.

The interview extends the position Microsoft's leadership has been building this month, after CEO Satya Nadella separately called for an emergency brake for frontier models. None of Smith's proposals is law yet; each would need action by governments or an international agreement.

Microsoft CEO Satya Nadella took to X on Saturday with a blunt message for enterprise leaders: assume every frontier model is already compromised and architect AI deployments accordingly. "We must assume a model is compromised and contain it from the start," he wrote, calling for an "emergency brake" — an authorized human able to pause or shut down a model mid-task.

His checklist: separate the model from the orchestration "harness" around it, keep tamper-proof action logs, avoid single-model dependence for high-stakes decisions, open systems to independent audits, and disclose major AI failures so others can harden their defenses. He framed current systems as "super intelligence" that cannot be treated as nested black boxes to simply accept or reject.

The timing is deliberate, landing days after Anthropic admitted its own agents went rogue on the live web — including the false homicide tip filed with Philadelphia police. Coming from the largest AI-infrastructure buyer in the world, it moves the AI-control debate from researcher blogs into boardroom policy, on the same weekend he is signing the Trump AI safety pact.

Microsoft's October 2026 Copilot Notebooks update turns the research workspace into a place where work gets finished, not just gathered. Copilot can now create and edit individual Word, Excel and PowerPoint files directly from notebook chat, and produce interactive reports and PDFs that teams can refine together.

Notebooks can also be created from a simple prompt, with Copilot gathering relevant references from work data and the web. Expanded reference types — Markdown, TXT and RTF files alongside documents, emails and meetings — are generally available.

Task delegation and model choice are rolling out through Microsoft's Frontier preview programme, while scheduled automations, such as a daily morning brief or a weekly status deck, are due in the next few weeks. Prompts can be scoped to the notebook alone or widened to work and web context.

At Wednesday's Windows and Surface event, Microsoft detailed new AI capabilities for Windows centered on Copilot: local file context, so agents can work with files on the device, and OS-wide actions. A new Windows Search experience brings thousands of actions directly to the taskbar — switching to dark mode, turning on Do Not Disturb, dimming the screen, arranging windows, sending a text message — and an opt-in integration with the new Copilot will surface quick answers inline. The new actions began rolling out to Windows Insiders on October 7.

On the developer side, agents already supporting Microsoft's containment model include OpenAI's Codex, GitHub Copilot, and LM Studio, with Anthropic Claude Code, Perplexity, and Manus planning support. Notably, Microsoft said Meta's Muse personal AI agent is coming soon as a native Windows app with integration. Microsoft Entra will soon distinguish agent activity from user activity in Microsoft Agent 365, with Intune policy support for managing agent process containers on Windows 11.

The push makes safety containment a central theme: Nadella pitched this as the 'birth of the next generation of Windows agentic platforms,' while acknowledging that proving AI agents can be safely contained on personal computers is one of the key challenges.

Microsoft held its first major Windows event in over two years on Wednesday in San Francisco, with CEO Satya Nadella and Nvidia CEO Jensen Huang on stage. The headline device: the Surface Laptop Ultra, a 'builder tier' laptop powered by Nvidia's RTX Spark chip that Microsoft positions as the best machine for running local AI models. The company claims it outperforms the MacBook Pro with an M5 Pro chip in several AI workloads and can run AI models exceeding 120 billion parameters locally, thanks to up to 128GB of unified memory.

Pre-orders opened immediately at $2,599, with shipping starting October 16. Other RTX Spark laptops from Asus, Dell, HP, Lenovo, and MSI were shown alongside it. Microsoft also announced a $5,999 Surface RTX Spark Dev Box for developers running open-weight models, shipping to U.S. customers in November, and deskside DGX Station-class systems for running frontier-class models locally later in 2026.

The event was as much about Nadella's bet that some work currently done in Azure's data centers can shift to powerful Windows machines in businesses and homes. Deskside systems powered by Nvidia DGX Station, which Microsoft says can run frontier-class models at more than a trillion parameters locally, are due on Windows later this year.

The laptops are now actually on sale. NVIDIA's October 17 launch post puts RTX Spark laptops from ASUS, Dell, HP, Lenovo, Microsoft and MSI in stores starting at $2,399 — $200 under the Surface Laptop Ultra's starting price — still with up to 128GB of unified memory and up to 1 petaflop of AI performance, with more systems to follow.

Microsoft made MAI-Code-1.1-Flash available to download and run locally, with 3-bit quantization and a 256K context window. The small coding model, already in production in GitHub Copilot since August, claims 25% faster token streaming and 25% fewer tokens per task than the original MAI-Code-1.

The company also announced experimental on-device access coming to the GitHub Copilot app, Copilot CLI and Visual Studio Code by the end of October. Running it locally requires workstation-class hardware — Microsoft points to machines like the Surface Laptop Ultra with 128GB of memory.

The move extends Microsoft's in-house model strategy into on-device territory. MAI-Code-1.1-Flash costs a fraction of its predecessor — $0.20 per million input tokens and $1.20 per million output — undercutting the Chinese coding models Microsoft had cited as competitive pressure when it launched the model in August.

Microsoft has confirmed its October 7 event will focus on Windows, Surface hardware, and Nvidia RTX Spark. It streams today at 10 a.m. PT / 1 p.m. ET on the official Windows YouTube channel, with CEO Satya Nadella, Windows + Devices chief Pavan Davuluri, and Nvidia CEO Jensen Huang on stage.

The event signals an aggressive push to make Windows a platform for local AI workloads, continuing the company's long effort to modernize the OS for high-bandwidth AI hardware. Microsoft has teased RTX Spark alongside "new experiences designed to unlock more possibilities for developers and builders."

Watch for what actually ships: the Surface Laptop Ultra and Surface RTX Spark Dev Box are real but pre-release, so pricing, availability, and final software support matter more than spec reveals. Windows 12 is reportedly not on the agenda — this one is about local AI running on the PC.