Microsoft's Dozens of Open Source AI Tools Suffer Supply Chain Attack,大量 Developer Credentials Stolen

Microsoft temporarily cut off access to at least 70 open-source projects hosted on GitHub following a cyberattack. Hackers injected malicious software into the code through a "supply chain attack," aiming to steal users' passwords and sensitive credentials when they open the compromised tools in AI coding applications such as Claude Code, Gemini CLI, and VS Code.

Ben Hope, a Microsoft spokesperson, confirmed that the company temporarily removed the affected repositories during the investigation, and some code repositories have been restored after review. This is the second known security vulnerability incident that Microsoft's open-source projects have faced in recent weeks. In mid-May this year, its open-source tool Durable Task was previously hacked, and the security agency OpenSourceMalware noted that this event marked a "second invasion" of the project.

At a time when large AI models and open-source ecosystems are deeply integrated, this intrusion into a major resource library once again sounds a safety alarm. With the rapid increase in the adoption of AI coding assistants, the open-source supply chain has become the new main battlefield for cyber warfare. How to build more resilient code review and security protection mechanisms is a common challenge that tech giants need to address in the AI era.

Microsoft Open Source Project Suffers Hacking Attack, Several AI Development Tools Have Been Infected with Password Theft Software

Microsoft GitHub has urgently taken down dozens of open-source repositories due to hacker attacks injecting password-stealing malware. Affected projects include Azure cloud services and popular AI development tools like IDEs, causing shock in the developer community. Security firms Cloudsmith and OpenSourceMalware first detected the anomaly.....

Microsoft Ecosystem Completion Plan Accelerates! Win11 Introduces AI Intelligent Agents to Overcome the Last Obstacle in Arm Native Application Compatibility

At the 2026 Build conference, Microsoft announced that it would use AI intelligent agent technology to efficiently convert x86 applications into native Windows on Arm applications, solving the key challenge of software compatibility. Through collaboration with hardware giants such as NVIDIA, the Windows on Arm ecosystem has significantly expanded, accelerating the PC industry's transition to the Arm architecture.

Pioneering Digital Healthcare! Microsoft Launches Preview Version of Copilot Health, Utilizing AI to Deeply Analyze Personal Health Records

Microsoft has released a preview of its medical AI assistant, 'Copilot Health,' for Microsoft 365 subscribers. This tool integrates cross-platform health data to help users efficiently manage and analyze health information, quickly find doctors, and gain deep insights into medical data, marking a significant step for Microsoft in healthcare.....

Free Yourself from Screens! Microsoft Launches Project Solara Platform, Partnering with Qualcomm and MediaTek to Create Enterprise AI Intelligent Agents

Microsoft launched the 'Project Solara' platform, providing technical support for AI intelligent agent products, aiming to free AI from traditional screen constraints and integrate it into enterprise mobile devices. Microsoft CEO Nadella had an in-depth discussion with Qualcomm's president to explore the necessity of developing new hardware and reached a consensus.

Redefining Traditional Operating Systems! Microsoft Collaborates with Qualcomm to Launch Project Solara, Opening a New Era of AI Agents

Microsoft and Qualcomm jointly launched the "Project Solara" chip-to-cloud platform, marking a paradigm shift in the tech industry. The CEOs of both companies discussed how AI agents will become the core interface for human-computer interaction, emphasizing that current platforms are undergoing profound changes.