Microsoft’s AI recall tool is still sucking credit card and social security numbers

What a week! Monday, police 26-year-old Luigi Mangione was arrested and charged him with the murder of UnitedHealthcare CEO Brian Thompson. Mangione’s five-day run from authorities ended on the morning of Dec. 4 when he was spotted eating at a McDonald’s in Altoona, Pennsylvania, about 300 miles from Manhattan, where Thompson was shot. – printed “ghost weapon”, model is known as FMDA or Free Men Don’t Ask.

Meanwhile, a flood of mysterious drone footage in New Jersey and neighboring states caused so much havoc that it quickly attracted federal attention. While many are wondering why the US military could not shoot down the dronesThe FBI, Department of Homeland Security and independent experts say the drone secret may not be much of a secretand drones are probably just planes.

As for more terrestrial threats, We moved to the right side of “Active Clubs”, small groups of young, fitness-oriented men indoctrinated with extremist ideology and linked to several violent attacks. While Robert Rundo, the man who helped invent the Active Club chain, was sentenced in federal court this week, Active Clubs are proliferating around the world.

Finally, we investigated fraud schemes use small cameras to gain an illegal advantage in pokerand we questioned the ways humans will use generative artificial intelligence to make the world a more dangerous place.

But that’s not all. Each week, we summarize privacy and security news that we haven’t covered in detail ourselves. Click on the headlines to read the full stories. And stay safe out there.

In May, Microsoft with joy Recall has announced an AI feature for some Windows PCs that silently takes screenshots every five seconds and then lets you easily search the resulting digital footprint. Forgot where you saw the recipe online? Tapping a few keywords into Recall could theoretically find the food again. It didn’t take long for the privacy and security community find a gap holes in the feature.

In response, Microsoft delayed the launch of Recall, and as a result made some significant changes— such as enabling Recall rather than enabling it by default, better encrypting data captured by Recall, and adding authentication to access the data it stores. The recall was finally launched for some users this month.

But this week it’s being tested by Recall Tom’s Hardware was featured The basic protection put in place by Microsoft can still fail. When the Recall setting called “filters sensitive data” was enabled, Tom’s Hardware tests found that it still captured screenshots of some sensitive data, such as credit card numbers and Social Security numbers. When the publication typed the credit card number and username and password into a Notepad window, they were collected in screenshots. “Similarly, when I filled out a PDF of a loan application in Microsoft Edge by entering the social security number, name and DOB, Recall noted it,” said Avram Piltch writes. However, the tool did not mention the details when it entered several online stores.