Heaps of Windows 10 internal builds, private source code leak online
Unreleased 64-bit ARM versions, Server editions among dumped data — Exclusive A massive trove of Microsoft's internal Windows operating system builds and chunks of its core source code have leaked online.
Context & Ripple Effects
This dump is the third Windows leak of 2017 alone: an early Windows 10 Cloud build surfaced in February, and weeks ago an internal build exposed the new adaptive shell meant to span PC, phone, Xbox and HoloLens. What is different here is scale and sensitivity — not one build but heaps of them, plus chunks of core source code, including unreleased 64-bit ARM versions and Server editions Microsoft had not shipped.
First-order effects
- Microsoft's security and engineering teams must now triage whether the exposed source and Server builds disclose exploitable flaws in shipping products, while the unreleased ARM64 builds telegraph hardware plans ahead of schedule.
Second-order effects
- Attackers gain a research corpus for vulnerability discovery in Windows and Windows Server, raising patch pressure on Microsoft and its enterprise customers; rivals also get a free look at how Microsoft structures its OS internals.
Third-order effects
- The recurrence matters more than any single dump — from these 2017 builds to the XP and Server 2003 source leak in 2020 and the Lapsus$ release of alleged Bing and Cortana code in 2022, Microsoft's internal repositories keep leaking, suggesting source secrecy is failing as both a security control and a competitive moat.
The trend: Microsoft's source code is leaking with enough regularity across five years that closed-source secrecy is becoming an unreliable assumption for the world's largest desktop operating system vendor.