Good morning. It's Monday, September 28, and we're covering Microsoft’s expanding AI assistant, the growing data exposure risks tied to Supabase apps, and Meta’s decision to open up Muse’s filesystem.

Plus: An essay on managing AI workers and the rise of the AI power user.

Meta’s Muse shifts from refusing filesystem access to freely packaging its root directory for download. The company says the cloud-based Secure VM is intentionally designed as a user-controlled Linux computer for installing software, browsing and compiling code. Muse now provides a clickable root-level file browser and ZIP archive with secrets removed.

A testing error sends AI agents from OpenAI, Meta, Anthropic, and Google toward real-world targets during cybersecurity evaluations. Israeli startup Irregular says internet access was unintentionally enabled while fictional targets overlapped with real domains. The incidents surfaced in late July, prompting tighter access controls, monitoring, and manual reviews.

Pope Leo XIV warns that advanced technology can become an instrument of domination when separated from ethics and human dignity. During his Sept. 25 UNESCO visit in Paris, he calls for education, science and AI to serve humanity rather than efficiency alone. The address comes 46 years after St. John Paul II’s UNESCO speech, with trust and truth central to peace.

You're up late, but your bed doesn't know that. Pod 6 by Eight Sleep does. It’s a smart mattress cover that cools your side of the bed, learns your patterns, and quietly rebuilds the eight hours everything else in your life depends on. The pros already sleep on it. Why not you?

Get up to $200 off the new Pod 6 with code MATTHEWBERMAN.

Microsoft introduced a redesigned Copilot on September 25, 2026, adding three capabilities: Home, Code and Autopilot. Home combines Chat and Cowork and brings Word, Excel and PowerPoint directly into Copilot, while Code lets users build apps, dashboards and automations using natural-language instructions in a sandboxed environment.

Autopilot, formerly called Scout, is a persistent cloud-based agent that can monitor work, follow up on tasks and run recurring processes with its own identity, memory and workspace. Microsoft is also expanding Copilot’s business context through Microsoft IQ and introducing new FinOps controls for managing AI usage and costs. → Read the full article here.

UpGuard Research says thousands of Supabase-powered websites may expose personal data through database misconfigurations, based on an analysis of roughly 300,000 domains. The researchers queried sites for commonly named “users” tables and found configurations ranging from fully inaccessible databases to cases where information was publicly returned.

The report builds on earlier incidents, including a February 2026 case in which Wiz found 35,000 email addresses and 1.5 million API authentication tokens exposed by Moltbook’s database. UpGuard attributes the continuing risk partly to AI coding agents, noting that Supabase enables rapid development but that programmatically created tables do not have Row Level Security enabled by default. → Read the full article here.

Goncourt Removes AI-Linked Novel: Thélyson Orélien’s book was removed from France’s top literary prize list after an anonymous AI-use allegation.

NSW AI Rental Crackdown Misfires: The government flagged a listing as AI-doctored, but the unusual Bondi beach view was a genuine $5,000 mural.

Court Filing Names War Department: A consolidated case lists Peter Hegseth as respondent, with multiple amici supporting the petitioner.

Khanna Pushes AI Treaty With China: Rep. Ro Khanna proposes binding safeguards and inspections as Trump shows little interest in AI controls.

Pro-AI PAC Backs First Democrats: Leading the Future’s PAC will spend six figures per district supporting Democrats in the general election.

Give your favorite AI assistant everything on your plate and let it identify what to automate, accelerate, delegate, or eliminate.

Thanks for reading. See you next time!

— Matthew Berman, Nick Wentz & the Forward Future Team