Microsoft AI released a draft Humanist AI Code of Conduct for MAI models on September 14, 2026, opening six weeks of public feedback. The company says the draft puts people first, keeps models interruptible and auditable, sets Absolute Constraints on weapons, offensive cyber, and mass manipulation, and will be revised later in 2026 to guide 2027 training — current models are not trained on it yet.

Pre-publish harden (THE-128): grounded to microsoft.ai/news/mai-code-of-conduct and microsoft.ai/code-of-conduct. Removed unverified “37-page” count (secondary reportage only). Kept six-week consultation, 2027 training guidance, not-trained-today caveat, Chain of Command, Absolute Constraints, and hedge language for aspirational draft status.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Apple plans to launch Apple Intelligence in mainland China in December with iOS 27.3, Bloomberg reports. The first release would include the features that reached the U.S. two years ago, but not the new Siri AI.
TWCERT/CC disclosed two code injection flaws in TeamPlus Messenger 16.8.0 through 17.0.6, each rated 8.8 under CVSS 3.1. Attackers who trick users into opening crafted links or content can run code after a Windows warning; version 17.0.7 fixes them.
CISA added PAN-OS flaw CVE-2026-0322 to its Known Exploited Vulnerabilities catalog on October 14, giving federal agencies until October 17 to act. The management-interface bug lets authenticated attackers run code as root; Palo Alto reports very limited exploitation.
CISA added Cisco Secure Email Gateway flaw CVE-2026-76519 to its exploited-vulnerabilities catalog, with an October 17 deadline for federal agencies. The 9.8-rated bug lets unauthenticated attackers gain root through crafted email attachments; Cisco has released updates.
CVE-2026-110536 is an unauthenticated OS command injection flaw in the HNAP handler of D-Link DIR-868L firmware 2.01b05, rated 10.0 by VulDB under CVSS 3.1 and CVSS 4.0. Exploit code is public, and D-Link no longer patches the end-of-life router.