Bing Chat (legacy)

Researchers found 73 suspected fake Visual Studio Code extensions on the Open VSX repository linked to the GlassWorm v2 info-stealing campaign, potentially exposing developers who installed them to malware.

A malware campaign targeting Chinese-speaking users used a trojanized SumatraPDF installer to deploy AdaptixC2 and gain remote access via VS Code tunnels. The incident description does not indicate a confirmed breach of Microsoft Bing Chat itself.

A threat group (UNC6692) impersonated IT help desk staff in Microsoft Teams to trick users into installing custom SNOW malware. Users targeted through Teams social engineering may be affected.

Anthropic’s Project Glasswing, an AI model that can discover software vulnerabilities at scale, was given early access to Microsoft and other large tech companies instead of being released publicly. The incident raises questions about how quickly identified bugs are disclosed and fixed.

Semantic Engines LLC sued Microsoft Corporation in the U.S. District Court for the Eastern District of Texas (Case No. 2:26-cv-00339). The specific claims have not yet been made public.