Alexandre BLANC Cyber Security’s Post

Microsoft reverses course, makes Recall feature opt-in only after security backlash. Why it matters: 1. Privacy activists and cybersecurity experts have questioned Microsoft's new Recall feature, which can screenshot every action taken on a device. The tool, initially activated by default, drew significant backlash due to privacy concerns. 2. Despite new safety measures, researchers demonstrated that the Recall feature remains potentially vulnerable to cybercriminals capable of decrypting the stored screenshot data. The risk to users is magnified if a device contains sensitive information like passwords or medical records. 3. The controversy around Recall raises questions over Microsoft's commitment to cybersecurity following several significant security incidents. The incident highlights the persistent challenge companies face in balancing innovative functionalities with robust data protection. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/e2SiQJ6x

In the rush to implement AI, let's not forget about cybersecurity! Imagine a feature on your computer that could track and save everything you've done via AI-indexed snapshots. It would have to be very secure, right? Otherwise, there would just be screenshots of your sensitive data sitting unsecured on your hard drive. Microsoft recently found themselves in a bit of trouble with the Recall feature that they announced. Security researchers quickly found a way to exploit the system and access these snapshots - whoops. To avoid controversy, Microsoft announced that the feature would not be on by default and has been ramping up the security surrounding it Smart move. Cybersecurity is incredibly important in the age of AI.

Microsoft's Windows Recall system on new Co-Pilot PC's has been compared to "Trojan 2.0", "Spyware", and "Stalkerware". This new system automatically loaded onto these new PC's takes a screenshot every 5 seconds of your screen. Microsoft states that all these are only stored locally, but security researchers have already found a work around to access this. Via preview versions of the tool that stores all screenshots in plain text. Obviously, this isn't a great for cybersecurity, in a new development security researchers have already made a tool that can automatically capture and summarize all of these screenshots. Dubbed "TotalRecall". "Included in what the database captures are screenshots of whatever is on your desktop—a potential gold mine for criminal hackers or domestic abusers who may physically access their victim’s device. Images include captures of messages sent on encrypted messaging apps Signal and WhatsApp, and remain in the captures regardless of whether disappearing messages are turned on in the apps. There are records of websites visited and every bit of text displayed on the PC. Once TotalRecall has been deployed, it will generate a summary about the data; it is also possible to search for specific terms in the database." What are your thoughts on Microsoft's Recall move? Check out the article below detailing TotalRecall, and concerns around Microsoft's Recall feature! https://lnkd.in/eZtsCpsV #cybersecurity #microsoft #AI #copilot #breaches #vulnerabilities

Recall takes “snapshots” of the user’s active screen every few seconds and then enables the user to review their activity in a timeline or by search in order to locate webpages, apps or files they previously viewed. https://lnkd.in/eVCy9e94 #ai #cybersecurity 

🔒 Exciting news, tech gurus! 🚀 Microsoft is stepping up its security game with major upgrades to Windows Recall feature ⚙️. Your data is now safer than ever with improved privacy controls and tighter access restrictions. It's like having a personal bodyguard for your digital life! 💻🔐 Here's what you need to know: - Microsoft's AI-powered Windows Recall feature just got even smarter and more secure 🔍. - Users can now easily remove data from Recall, putting YOU in control 🕶️. - Stronger default protection means your sensitive information is safeguarded by default 🛡️. - Tighter access controls ensure only authorized users can view your data 👥. This update is a game-changer in the cybersecurity arena! 🛡️💥 As data breaches continue to make headlines, Microsoft's proactive approach sets a new standard for protecting user privacy. With AI at the helm, the future of security looks brighter than ever ☀️. 💬 How do you think this will impact the cybersecurity landscape? Share your thoughts below! 💬 #ainews #automatorsolutions 🤖💡 Let's stay vigilant, stay informed, and continue pushing the boundaries of innovation together! 🌐💪 #TechIsOurFuture #CyberSecChampions 🚀 #CyberSecurityAINews ----- Original Publish Date: 2024-09-27 11:01

Computer Care in the Press! We were recently invited to comment on an article by #Yahoo!Finance on Microsoft's Copilot+Recall and why they want to take screenshots of your computer every few seconds. https://yhoo.it/3yPLTay What do you think? A great step forward, or a hackers dream? #computercare #inthepress #MicrosoftRecall #MicrosoftCopilot #AI #cybersecurity #cybercare

How does no one see this coming? When #Microsoft #CEO #SatyaNadella revealed the new #Windows #AI tool that can answer questions about your #webbrowsing and #laptop use, he said one of the “magical” things about it was that the #data doesn’t leave your #laptop; the Windows #Recall system takes #screenshots of your activity every five seconds and saves them on the device. But security experts say that data may not stay there for long. Two weeks ahead of Recall’s launch on new #Copilot+ #PCs on June 18, #security #researchers have demonstrated how preview versions of the tool store the screenshots in an #unencrypteddatabase. The researchers say the data could easily be hoovered up by an #attacker. And now, in a warning about how Recall could be abused by #criminal #hackers, Alex Hagenah, a cybersecurity strategist and ethical hacker, has released a demo tool that can automatically extract and display everything Recall records on a laptop. https://lnkd.in/g6EGxs4a

How does no one see this coming? When #Microsoft #CEO #SatyaNadella revealed the new #Windows #AI tool that can answer questions about your #webbrowsing and #laptop use, he said one of the “magical” things about it was that the #data doesn’t leave your #laptop; the Windows #Recall system takes #screenshots of your activity every five seconds and saves them on the device. But security experts say that data may not stay there for long. Two weeks ahead of Recall’s launch on new #Copilot+ #PCs on June 18, #security #researchers have demonstrated how preview versions of the tool store the screenshots in an #unencrypteddatabase. The researchers say the data could easily be hoovered up by an #attacker. And now, in a warning about how Recall could be abused by #criminal #hackers, Alex Hagenah, a cybersecurity strategist and ethical hacker, has released a demo tool that can automatically extract and display everything Recall records on a laptop. https://lnkd.in/eTvvuWHQ

Wow, I don't like that. "Unveiled on Monday, Recall is a preview feature that will be added to Microsoft's artificial intelligence system Copilot+ and to Windows devices ... Microsoft's new automatic screenshot retrieval feature could enable hackers to steal sensitive information such as online banking credentials, security experts warned." #Microsoft #cybersecurity #cybersecuritynews #privacy #dataprivacy