NewApp Digest
search bot

execution containers

Windows AI agent security: how isolation works
Winsage
October 21, 2026

Windows AI agent security: how isolation works

Microsoft's AI agent security is structured around three execution boundaries: local process isolation, session isolation, and cloud-based Windows 365 for Agents. The introduction of Microsoft Execution Containers (MXC) on June 2, 2026, enhances local isolation through two methods: process isolation, which restricts an agent's access to specific files and networks, and session isolation, which separates an agent from the user's interactive environment. The MXC framework includes policies for filesystem access, network traffic, and user-interface controls, with an audit mode that disables sandbox security for analysis purposes. The choice between local isolation and Windows 365 for Agents depends on the agent's execution environment, with local isolation providing limited access and Windows 365 offering a completely separate cloud environment. MXC is in early preview, while Windows 365 for Agents is generally available.
Microsoft’s AI-Powered Windows Strategy: 5 Things To Know
Winsage
October 9, 2026

Microsoft’s AI-Powered Windows Strategy: 5 Things To Know

Microsoft has transitioned its Execution Containers capability into general availability, creating a secure environment for AI agents on Windows 11. Nvidia's CEO praised Microsoft's MXC architecture as a revolutionary foundation for application development. Organizations are increasingly relying on managed service providers to navigate AI tools. The general availability of Microsoft Execution Containers allows organizations to define access for AI agents, with real-time policy enforcement. The open-source MXC library integrates across Windows, macOS, and Linux, helping manage agent interactions and mitigate risks. Microsoft is enhancing the Copilot experience with hybrid intelligence features and revamping Windows Search for better performance. Preorders for new Copilot+ PCs powered by Nvidia's RTX Spark technology are open, with shipments starting on October 16. Device partners like Dell, HP, and Lenovo are also launching AI PCs on the same date. Later this year, Dell and HP will introduce Nvidia’s DGX Station technology to enable local running of frontier-class AI models on Windows devices.
Microsoft Stocks Rise as Windows Pulls AI Off the Cloud
Winsage
October 8, 2026

Microsoft Stocks Rise as Windows Pulls AI Off the Cloud

Microsoft is distributing artificial intelligence (AI) workloads between local Windows PCs and the cloud, with shares rising approximately 0.3% to 1.39 as of October 8. The strategy involves executing tasks on devices while using cloud resources for additional computing power. Microsoft has announced the general availability of Execution Containers to enhance security for AI agents. The upcoming Surface Laptop Ultra will support models with over 120 billion parameters, available on October 16, and Microsoft is introducing a 137-billion-parameter MAI Code model utilizing compression techniques. Microsoft shares are trading at 10.1% below the GF Value estimate of 1.09, indicating a valuation cushion. The company aims to reduce reliance on cloud services while enhancing Windows and developer offerings to create new revenue streams.
silver Android smartphone
Winsage
October 8, 2026

Copilot Gets Control of Windows and Your Files as Microsoft’s Recall Bill Comes Due

Microsoft is inviting Windows users to grant its Copilot feature access to their files and activities, with user consent. The new iteration of Copilot can understand content on the device, perform tasks like organizing files, troubleshooting, and writing code, with some tasks processed in the cloud. Activation is opt-in, folder access is limited, and Copilot operates under separate accounts from users. Microsoft has implemented safeguards, including Microsoft Execution Containers to define agent access. However, internal warnings from Microsoft's security team highlight potential risks associated with agents capable of modifying environments. Features for enhancing auditability of agent activities are under development. Microsoft previously faced criticism for its Recall feature, which raised security concerns. The opt-in design places accountability on Microsoft, as users must grant access. The hybrid features require a Copilot+ PC and are set to roll out in the coming months, with taskbar search actions already reaching Windows Insiders. Over 40 percent of newly manufactured business laptops are Copilot+ PCs, with the Surface Laptop Ultra launching on October 16.
Microsoft Turns Windows PCs Into Command Centers for AI Agents
Winsage
October 7, 2026

Microsoft Turns Windows PCs Into Command Centers for AI Agents

Microsoft has introduced a suite of software tools and devices to prepare personal computers for the era of artificial intelligence agents, emphasizing the need for enhanced compute, security, and control. The company is transforming Windows into a platform for hybrid intelligence, allowing AI agents to run locally and access the cloud securely. Notable innovations include Microsoft Execution Containers (MXC), which help manage agent access and monitor actions, and are now available for Windows 11 and integrated with Microsoft Agent 365. This allows organizations to enforce policies on AI interactions in real-time. Microsoft has also improved the synergy between local models and cloud AI, enabling advanced functionalities on local PCs. The new Copilot feature will leverage local context to enhance user interaction with AI agents. Additionally, Microsoft has launched a new generation of PCs, including the Surface Laptop Ultra, powered by the Nvidia RTX Spark chip, aimed at improving local AI performance and positioning Microsoft as a leader in the AI agent market.
Google researcher explains why Windows NT "puts Linux to shame," and imagines an alternate history where it won
Winsage
September 27, 2026

Google researcher explains why Windows NT “puts Linux to shame,” and imagines an alternate history where it won

Laurie Kirk, a Google researcher and former Microsoft reverse engineer, argues that the Windows NT kernel is superior to Linux in several aspects, particularly in its architecture for managing resources and access permissions. She emphasizes that her critique focuses on the system architecture rather than the user interface of Windows 11. Kirk raises concerns about Linux's suitability for AI agents due to its complex security model, while praising NT's object-based design and security framework. She speculates on an alternate history where Microsoft had created an "Open NT," allowing for customizable components, but acknowledges the challenges of maintaining forks in operating systems. Critics of NT highlight its performance and reliability issues, while Linux's open-source nature has contributed to its dominance in servers and cloud computing. Kirk suggests that future operating systems may need to balance the defined resource types of NT with the flexibility of Linux, especially as AI technology evolves.
Announcing Project Zenith: The ready-to-code Windows experience on developer-class devices
Winsage
September 4, 2026

Announcing Project Zenith: The ready-to-code Windows experience on developer-class devices

Windows announced Project Zenith, a developer-optimized Windows 11 experience designed for devices with over 64 GB of unified memory and memory bandwidth exceeding 250 GB/s. The project will initially launch with AMD’s Ryzen AI Halo and will include preconfigured Windows setups and a curated selection of development tools. Devices under Project Zenith will allow developers to run models with over 30 billion parameters locally, reducing reliance on cloud resources. Enhancements to Windows 11 include improved performance and a cleaner workspace tailored for coding, with features like pinned Windows Terminal and Visual Studio Code. Project Zenith also integrates the Windows Subsystem for Linux (WSL) and provides a secure environment for developing agentic applications, leveraging OS-enforced identity and Microsoft Execution Containers (MXC). The initiative aims to offer a consistent ready-to-code experience across various devices while responding to developer needs and evolving with advancements in AI and software development.
Windows 365 turns five, as Microsoft pushes Cloud PCs deeper into AI
Winsage
August 20, 2026

Windows 365 turns five, as Microsoft pushes Cloud PCs deeper into AI

Microsoft's cloud PC platform, Windows 365, has reached its fifth anniversary since its launch in 2021. It is designed for business and enterprise customers, allowing users to stream a complete Windows desktop from the cloud. Over the past five years, Microsoft has enhanced Windows 365 by integrating business tools for IT teams, including mini PCs optimized for the service. Windows 365 now integrates with tools like Intune for managing Cloud PCs and Entra for identity and access management. Microsoft is developing Windows 365 for Agents, enabling AI agents to access managed Cloud PCs and execute tasks. Support for Microsoft Execution Containers (MXC) is also forthcoming, facilitating sandboxed environments for AI workloads.
Windows quality: an update on the commitment we made in March
Winsage
July 31, 2026

Windows quality: an update on the commitment we made in March

In March, a commitment was made to enhance the quality of Windows, with a focus on several immediate changes including enhanced taskbar customization, meaningful AI integration, minimizing disruptions from Windows Updates, faster and more reliable File Explorer, greater control over widgets and feed experiences, a more straightforward Windows Insider Program, and improving the Feedback Hub experience. The core areas of focus are performance, reliability, and well-crafted experiences, with improvements already being rolled out to Windows Insiders and set to expand across Windows 11 PCs this fall. Recent updates include enhancements to the Windows Search Box, improvements for developers at Build 2026, advancements in WinUI 3, updates to the Taskbar and Start menu, simplified AI integration, foundational architecture enhancements for File Explorer, updates to widgets and feed experiences, the launch of the Driver Quality Initiative (DQI), memory efficiency improvements, enhanced reliability for Windows Hello, changes to reduce disruptions from Windows Updates, and a simplified Windows Insider Program. Looking ahead, the team plans to bring enhancements to general availability while focusing on onboarding and setup, memory optimization for PCs with 8GB and above, family features, and improved voice interactions. Engaging with Windows Insiders has been a highlight, and the team remains committed to ongoing improvements based on user feedback.
Search