Italy's AGCM is investigating Microsoft over claims that fragmented notices left Microsoft 365 subscribers automatically moved to costlier plans once Copilot and Designer features were added without clear explanation of the changes.

The watchdog alleges the updates reached users through disjointed messages that did not clearly state what extra features were included in return for the increased fees.
Microsoft has spent the past year weaving Copilot into just about everything it sells, from Microsoft 365 to Windows, with pricing following close behind.
This investigation underscores how default opt-in mechanics for AI add-ons are drawing antitrust and consumer protection scrutiny across Europe, potentially forcing clearer disclosure standards for enterprise SaaS providers.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Microsoft says CVE-2026-124194, a moderate Outlook spoofing flaw, is already exploited and can disclose an NTLMv2 hash if a user opens a crafted file.
Microsoft's November 2026 Security Updates list 1,094 flaws, including 63 rated critical and one Outlook bug already exploited.
Microsoft has announced CVE-2026-118147, a high-severity spoofing vulnerability caused by improper certificate validation in Visual Studio. The flaw affects four product lines and requires immediate updates to the listed fixed builds.
Microsoft reported fiscal first-quarter revenue of $92.3 billion, up 19 percent, with Azure growth of 48 percent. Microsoft Cloud revenue was $63.9 billion, up 30 percent, and Devices and Consumer revenue fell 3 percent to $15.5 billion.
Microsoft published CVE-2026-62765 on Oct. 27, describing a type-confusion flaw in Microsoft Edge (Chromium-based) that could allow remote code execution, rated Important with a CVSS 3.1 score of 7.5. Microsoft's advisory lists it as not exploited and not publicly disclosed. The advisory's fixed-build number conflicts with Edge's own release notes, so the exact patched version is unconfirmed.