Copilot’s Prompt Hole Meets Mojo’s Open-Source Turn
Wednesday, August 19, 2026 · 5 min
Microsoft Copilot’s undocumented autorun URL parameter let researchers exfiltrate inbox data through prompt injection, sharpening agent-security concerns as Modular open-sources Mojo 1.0 and pushes its platform across Trainium, TPUs and Qualcomm accelerators.
Listen
Show notes
Microsoft Copilot’s undocumented autorun URL parameter let researchers exfiltrate inbox data through prompt injection, sharpening agent-security concerns as Modular open-sources Mojo 1.0 and pushes its platform across Trainium, TPUs and Qualcomm accelerators.
In this episode
- Microsoft Copilot reveals secret input that allowed it to be hacked — Ars Technica
Like most AI assistants, Copilot can receive prompts that are embedded into a URL. The base part of the URL can allow the LLM to open, say, Gmail. Parameters and text to the right in the URL can then instruct the assistant to summarize inbox contents or begin drafting a new message. As noted already, the commands aren’t supposed to execute without user approval. With the Copilot revelation of the…
- Modular: ModCon 2026: Open source, open cloud, open silicon — Modular
Modular: ModCon 2026: Open source, open cloud, open silicon ModCon is today! Watch the livestream. August 18, 2026 # ModCon 2026: Open source, open cloud, open silicon Modular Team Company Four and a half years ago, Modular made a bet: AI would not run on one kind of silicon forever, and the software stack would need to be rearchitected for a world of heterogeneous hardware and increasingly…
“Does this project have any meaningful traction? Seemed like a cool idea, but I wasn't even sure what problem does it solves. Looks like its completely missing from the regular discussion / news outlets. Every 1-2 years some barely visible post/article reminds me it even exists...” — Hacker News (26 pts thread)
Our take: We think that skepticism is fair: open-sourcing Mojo helps, but traction is still measured in shipped workloads, not elegant compiler lineage. The stronger claim here is less “everyone will rewrite Python tomorrow” and more “Qualcomm wants a portable AI stack it can put in front of real customers.”
“I guess this is the follow up to the Qualcomm acquisition. Introduces "Modular Cloud". In the keynote they say they've been serving models on openrouter under the name ModelRun. Windows support for Mojo (that isn't via WSL). Coincides with the open sourcing of Mojo.” — Hacker News (3 pts thread)
Our take: That’s the concrete read. The Qualcomm angle matters because Modular is no longer just pitching a language; it’s trying to make the cloud, Windows support, and non-Nvidia accelerator support all feel like one deployment surface.
“Summarized here: This is by Chris Lattner, known for LLVM and Swift.” — Hacker News (26 pts thread)