A single daily edition of announcements from the AI coding tools you use, read from a curated source list, summarised, and linked back to the original. No infinite feed, no account, no advertising.
Copilot code review gets agent skills and MCP, generally available
GitHub moved agent skills and MCP support in Copilot code review out of public preview to all paid Copilot tiers: Pro, Pro+, Business and Enterprise. A team can now drop SKILL.md files into .github/skills so reviews invoke internal tools and coding standards, and configure MCP servers in repository settings to pull context from issue trackers and documentation systems into the review itself. Review comments now carry attribution showing when one was generated using agent skills or MCP context.
A self-replicating prompt injection worm through Word
Hidden instructions embedded in a document can be read as user commands by Copilot for Word, letting an attacker manipulate the document being drafted. The worm behaviour is the new part: Copilot may copy those hidden instructions into the resulting document, turning the output into a fresh carrier that triggers again in the next Copilot workflow, propagating without the original document being involved. It was responsibly disclosed to Microsoft on a 144-day remediation window, and as of posting there is no mitigation covering the full class of attack.
Cursor shipped an iPad app to every paid plan, available through the App Store. Sidebar chats stay pinned so several agents run in view at once, split screen keeps a review open beside a chat, and file diffs render in full. The app covers pull requests end to end: comments, checks, approvals, adding reviewers and prompting agents to resolve issues, with an Inbox for what is in progress and what needs attention. It also adds Bitbucket and Azure DevOps integration, multi-PR sessions, team switching, and screenshot markup with Apple Pencil.
