This week in Microsoft AI

Copilot security fixes land as Microsoft hardens its AI footprint across M365 and Edge.

Microsoft patched three Microsoft 365 Copilot information-disclosure vulnerabilities, reinforcing that Copilot needs the same operational rigor as other security-sensitive services. In parallel, Microsoft kept Copilot as a core feature in Edge while simplifying the browser UI, signaling long-term product commitment. A separate earnings analysis highlighted rapid revenue growth in Microsoft’s AI business, which is likely to sustain investment in Copilot and Azure AI capabilities.

Three Microsoft 365 Copilot CVEs patched

Microsoft disclosed and fixed three Microsoft 365 Copilot information-disclosure vulnerabilities on 2026-05-07 (CVE-2026-26129, CVE-2026-26164, CVE-2026-33111). The issues relate to how Copilot could expose sensitive Microsoft 365 content.

Treat Copilot rollout as a security program: align M365 admins, SecOps, and patch management SLAs for Copilot-related components.
Recheck data boundaries for Copilot: least privilege, sensitivity labels, and DLP policies reduce the blast radius if Copilot can surface content unexpectedly.
Document compensating controls for auditors: conditional access, restricted connectors, and governance around prompts and plugins help support EU/CZ compliance discussions.

Source — PointGuard AI (AI security incidents) securitymicrosoft-365-copilot

Microsoft keeps Copilot as Edge simplifies UI

Microsoft is removing the general sidebar in Edge to streamline the interface while keeping Copilot integrated as a persistent feature. The change reinforces Copilot’s role as the default in-browser assistant in Microsoft’s stack.

Plan for Copilot as a standard browser capability in managed Windows estates, including policy configuration and user support materials.
Use Edge policies to control AI usage paths (e.g., allowed sites, data handling, sign-in) so employees do not route work data through unmanaged assistants.
Review training and helpdesk scripts because UI changes can reduce confusion but also shift how users discover Copilot and share content into prompts.

Source — XDA Developers edgecopilot

Earnings analysis cites $37B Microsoft AI run rate

An earnings analysis reported Microsoft’s AI business reached a $37B annual run rate with 123% year-over-year growth, driven by Copilot and Azure AI/OpenAI services. The piece frames AI as a core revenue line rather than an experimental investment area.

Expect product roadmaps and licensing to keep evolving quickly; CIOs should budget for ongoing change management rather than one-time rollout costs.
A larger revenue base increases the likelihood of deeper enterprise features (admin controls, compliance tooling, observability) that reduce risk for regulated Czech workloads.
Partner ecosystems tend to follow revenue; procurement teams should anticipate more Copilot- and Azure AI-based offerings from ISVs and integrators in the Microsoft channel.

Source — 24/7 Wall St. (earnings analysis) marketazure-ai