Microsoft’s AI Recall Tool Is Still Sucking Up Credit Card and Social Security Numbers

What a week! On Monday, police Luigi Mangione, 26, arrested and charged him with murdering UnitedHealthcare CEO Brian Thompson. Mangione was found eating at a McDonald’s restaurant in Altoona, Pa., about 300 miles from authorities, where Thompson was shot to death on the morning of Dec. 4 and what followed his five-day escape. The authorities’ pursuit is over. Its model is called FMDA, which stands for “Free People Don’t Ask.”

Meanwhile, a spate of mysterious drone sightings in New Jersey and neighboring states wreaked havoc, quickly drawing federal attention. When many people are confused Why can’t the U.S. military directly shoot down drones?the FBI, Department of Homeland Security and independent experts say The drone mystery may not be a mystery at allwhile drones may mostly just be airplanes.

As for more ground threats, We delve into the far-right realm of “activist clubs”, A small group of young men dedicated to fitness who are deeply influenced by extremist ideology and have been linked to a number of violent attacks. Although Robert Rundo, who helped invent the Active Club network, was sentenced in federal court this week, Active Clubs are proliferating around the world.

Finally, we investigated cheating schemes Using tiny cameras to gain an illegal advantage in pokerwe asked how Humanity will use generative artificial intelligence to make the world a more dangerous place.

But that’s not all. Each week, we summarize privacy and security news that we don’t cover in depth ourselves. Click on the title to read the full article. And stay safe out there.

Back in May, Microsoft cheerfully Announcing Recall, an artificial intelligence feature available on some Windows PCs that silently takes a screenshot every five seconds and then lets you easily search the resulting digital footprint. Forgot a recipe you saw online? In theory, entering a few keywords into Recall could find the dish again. It didn’t take long for the privacy and security community to looking for gaps holes in features.

In response, Microsoft delayed the release of Recall and eventually made some big changes— such as making Recall opt-in rather than enabled by default, better encrypting the information Recall captures, and adding authentication to access its stored data. Recall is finally rolling out to some users this month.

This week, however, Recall tests Tom’s hardware display Critical protections implemented by Microsoft can still fail. After turning on a recall setting called “Filter Sensitive Information,” Tom’s Hardware’s tests found that it still took screenshots of some sensitive information, such as credit card numbers and Social Security numbers. Credit card numbers, usernames, and passwords are collected in the screenshot as the publication enters them in the Notepad window. “Similarly, when I filled out a loan application PDF in Microsoft Edge, entering my social security number, name, and date of birth, Recall captured this,” Avram Piltch Write. However, when entering details in several online stores, the tool did not record the details.