March Patch Tuesday: An Excel XSS Can Weaponize Copilot Agent, and an AI Found the Worst Bug
Microsoft's March 2026 Patch Tuesday includes CVE-2026-26144, a zero-click Excel XSS that turns Copilot Agent into a data exfiltration channel, plus CVE-2026-21536 — the first critical vulnerability discovered entirely by an autonomous AI agent.