Thursday, October 22nd 2026

Microsoft Warns AI Agents Can't Be Trusted, But Continues Adoption

Microsoft is one of the few companies evaluating the dangers of AI while simultaneously implementing the latest features across its product portfolio with cutting-edge designs, advanced models, and top-tier frameworks. However, this doesn't mean the company is halting the rollout of new AI features, despite being aware of the risks of these products on consumer PCs. For example, on PCs running the Windows 11 operating system, the Copilot AI companion includes features that can control some actions on your PC, with your consent. Yet, the company is now arguing in a separate news post that frontier models and the agents running on them are not to be trusted.
Unfortunately, frontier models, regardless of their origin, cannot be trusted. This is not because models are inherently malicious. Models have been trained to attain results, which often leads to reward hacking, and models are not optimized around organizational norms or judgment. Agents are unpredictable. They will adapt as the context changes, may not behave as intended and will collaborate and collude with other agents to reach their objectives, without needing to be compromised.
Even though Microsoft recently simplified ways to access some AI features in its File Explorer through a change that is part of a OneDrive update aimed at reducing eight AI actions and keeping them available in other places instead of being directly displayed to consumers, the features aren't exactly disappearing. If you've ever wondered how many Copilot applications exist, the official count stands at 80 Copilot applications, products, services, and hardware that the Redmond giant has developed. Across every Microsoft vertical, there is a Copilot icon in some form, even present on Copilot+ PCs with its own dedicated Copilot key. The number of features isn't going down, but the visibility might. As agentic AI stands as a serious security threat, we need to see careful implementation instead of reckless additions.
Source: Microsoft
Add your own comment

23 Comments on Microsoft Warns AI Agents Can't Be Trusted, But Continues Adoption

#1
RejZoR
"Agents can't be trusted." And also "Give your agents credit card so they can shop on your behalf."

Which one is it?!
Posted on Reply
#2
Darmok N Jalad
I keep trying to get my Copliot Agent to follow orders, and it’s like I’m chatting with an amnesia patient. What concerns me most is how confident it is, even when it’s plainly wrong.
Posted on Reply
#3
Hecate91
Microslop: AI agents can't be trusted.
Also Microslop: let's force copilot into everything with no easy way to turn it off.
Posted on Reply
#4
Mysteoa
Microsoft: This is Mister KnifeStaber. We don't trust him to not stab us, but we will still work with him.
Posted on Reply
#5
_roman_
Copilot is the first who crashes the fastest. I do not want to test it in windows. I had several initial crashes today. Most stuff is worse as several months ago.

When you want to test it yourself, ask copilot about systemd and how to configure it. copilot + gemini + chatgpt never heard about systemd. Seems 16 year old initialisation routine. I did not verify it. I decided I want to know at least the core commands of SYSTEMD so i can read the man-page if I am ever crazy enough to use or adapt it.
Posted on Reply
#6
Darmok N Jalad
Sounds like “Agent” is a great name for these. In movies, you’re never quite sure who an agent really is or who he works for.
Posted on Reply
#7
Tess
AleksandarK...we need to see careful implementation instead of reckless additions.
No! No implementation. AI/SI should be separate from the OS and treated like any other application - installable or removable at the user's behest. Maybe in the most permissive cases they could be given a status within the permissions hierarchy of "Users and Groups" - but that would also require more user transparency and granulation over those controls. In any case "implementing" AI/SI into an OS is and will continue to be, just a really really bad idea.
Posted on Reply
#8
Darmok N Jalad
TesselatorNo! No implementation. AI/SI should be separate from the OS and treated like any other application - installable or removable at the user's behest. Maybe in the most permissive cases they could be given a status within the permissions hierarchy of "Users and Groups" - but that would also require more user transparency and granulation over those controls. In any case "implementing" AI/SI into an OS is and will continue to be, just a really really bad idea.
Imagine the mess these things will create with users who already fall for current scams. Agents need wide access, which is the very thing we’ve been trying to engineer out of software via permissions. This isn’t an antivirus program or a file explorer, it’s a highly variable tool that “works best” when it has access to your personal information and the software you use. With such a complex nature, disaster is seemingly a bad update or a click or two away.
Posted on Reply
#9
Tess
Darmok N JaladImagine the mess these things will create with users who already fall for current scams. Agents need wide access, which is the very thing we’ve been trying to engineer out of software via permissions. This isn’t an antivirus program or a file explorer, it’s a highly variable tool that “works best” when it has access to your personal information and the software you use. With such a complex nature, disaster is seemingly a bad update or a click or two away.
Right?!? But if enough people point that out or complain, M$ will do us the favor of hiding the intrusive implementation(s) from us, their customers. :P

According to TPU there are 80 of them but I'm waiting for the six hundred and sixty sixth before I move to Linux or run for the hills. :D
Posted on Reply
#11
konataVT
how are we supposed to run these new agents when AI hardware is a cheap 2000 dollars? feels like this wasnt thought through
Posted on Reply
#12
mechtech
Look at that cliff!!!!

Let's see what happens when we walk off it????
Posted on Reply
#13
Bigshrimp
Isn't this literally an oxymoron or contradiction? Agentic AI isn't safe, but we like the grift, so who cares? We will just keep on keeping on. It's like Palpatine building the Death Star at this point.
Posted on Reply
#14
londiste
It's kind of fun to see CoPilot embedded in enterprise software pieces and its UI elements having disclaimers next to them ranging from "it can provide wrong information" to "entertainment purposes only" :D
Posted on Reply
#15
_JP_
Agents are unpredictable.
And so are the costs for running them. That is quite the calibre that you're aiming at your feet, Microsoft, considering how every company with huge contracts are "pushed" to implement these CoPilot agents, while telling employees to use them "wisely" and "as necessary" because token subsidization stopped, May 31st.
Posted on Reply
#16
Vayra86
konataVThow are we supposed to run these new agents when AI hardware is a cheap 2000 dollars? feels like this wasnt thought through
It wasn't thought through, Silicon Valley is just doing as SV does, go fast and break things. This is just social media all over again... and people still didn't quite catch on how fucked they are using that.

They don't give a fuck about any of us. Techbros are hard at work moving us into the Cyberpunk dystopia. Lovely isn't it
Posted on Reply
#17
Bigshrimp
Vayra86It wasn't thought through, Silicon Valley is just doing as SV does, go fast and break things. This is just social media all over again... and people still didn't quite catch on how fucked they are using that.

They don't give a fuck about any of us. Techbros are hard at work moving us into the Cyberpunk dystopia. Lovely isn't it
Yes. Expect some crazy stuff to get going soon. They have been working on a bunch of dystopian technological systems, like DBDCs on crypto blockchains, Digital IDs, 15 minutes cities, and many other things (mass producing drones hooked into AI military infrastructure) that sounds truly dystopian. The mass surveillance we see now will also get expanded by those other aforementioned systems. That's what all of these data centers are for. We have over 5,000 data centers in the USA with even more gigantic ones being built now, and the next highest amount of data centers found in the world is around 500+ in Germany. It's all nightmare fuel.
Posted on Reply
#18
bug
RejZoR"Agents can't be trusted." And also "Give your agents credit card so they can shop on your behalf."

Which one is it?!
Well, people can't be trusted either, but you still need to hire them. There's no difference.
Posted on Reply
#19
RejZoR
bugWell, people can't be trusted either, but you still need to hire them. There's no difference.
There is a difference. A person can be held accountable. They also have a fear of legal retaliation if they plan on knowingly doing something malicious. Ai agents just do it because they don't give a damn except for few things that were selectively programmed in to be rejected like pirated stuff or helping with murder or something that obvious and the legal aspect of it is so murky as Ai companies keep pretending if their Ai fucks up or does something illegal just "no one" is even being able to be held accountable as they just lift their hands and say "well we didn't do it, the Ai did it" even though it's their damn Ai that they designed and sold.
Posted on Reply
#20
bug
RejZoRThere is a difference. A person can be held accountable. They also have a fear of legal retaliation if they plan on knowingly doing something malicious. Ai agents just do it because they don't give a damn except for few things that were selectively programmed in to be rejected like pirated stuff or helping with murder or something that obvious and the legal aspect of it is so murky as Ai companies keep pretending if their Ai fucks up or does something illegal just "no one" is even being able to be held accountable as they just lift their hands and say "well we didn't do it, the Ai did it" even though it's their damn Ai that they designed and sold.
I thought the point was obvious: supervision ;) (and no, not the Superman kind)
Posted on Reply
#21
Gurg
Finally updated to W11 version 26H2 from Repair Version W11 25H2 on 10-15-2026 after delaying for weeks to facilitate Microsoft patching previous bugs.
Have ended up with black screen 4 or 5 times since then. Screen goes black but evidently power is still going to PC as led lighting and fans are still on. Only correction is turning off PSU and restarting. This happened while web browsing rather than when computer was under heavy usage activity while gaming.
To be careful, after restarting I ran antivirus scans and no viruses were detected.

I don't trust Microsoft let alone AI agents.
Posted on Reply
#22
bug
GurgFinally updated to W11 version 26H2 from Repair Version W11 25H2 on 10-15-2026 after delaying for weeks to facilitate Microsoft patching previous bugs.
Have ended up with black screen 4 or 5 times since then. Screen goes black but evidently power is still going to PC as led lighting and fans are still on. Only correction is turning off PSU and restarting. This happened while web browsing rather than when computer was under heavy usage activity while gaming.
To be careful, after restarting I ran antivirus scans and no viruses were detected.

I don't trust Microsoft let alone AI agents.
Funny. I updated to 26H2 a couple of weeks ago and apart from finally being able to send the taskbar to the side of the screen again, I can't tell the difference.
Posted on Reply
#23
konataVT
Vayra86It wasn't thought through, Silicon Valley is just doing as SV does, go fast and break things. This is just social media all over again... and people still didn't quite catch on how fucked they are using that.

They don't give a fuck about any of us. Techbros are hard at work moving us into the Cyberpunk dystopia. Lovely isn't it
just... lovely. atleast i can run 9B models slowly! consumer AI amirite?
Posted on Reply
Add your own comment
Nov 11th, 2026 23:49 CST change timezone

New Forum Posts

Popular Reviews

TPU on YouTube

Controversial News Posts