Online Privacy and Overfishing
June 5 2024Microsoft recently caught state-backed hackers using its generative AI tools to help with their attacks. In the security community, the immediate questions weren’t about how hackers were...
Read morePersonal AI Assistants and Privacy
May 23 2024Microsoft is trying to create a personal digital assistant:
At a Build conference event on Monday, Microsoft revealed a new AI-powered feature called “Recall” for Copilot+ PCs that...
Read more
Zero-Trust DNS
May 16 2024Microsoft is working on a promising-looking protocol to lock down DNS.
ZTDNS aims to solve this decades-old problem by integrating the Windows DNS engine with the Windows Filtering Platform—the...
Read more
Microsoft and Security Incentives
April 23 2024Former senior White House cyber policy director A. J. Grotto talks about the economic incentives for companies to improve their security—in particular, Microsoft:
Grotto told us Microsoft had to...
Read more
Surveillance by the New Microsoft Outlook App
April 4 2024The ProtonMail people are accusing Microsoft’s new Outlook for Windows app of conducting extensive surveillance on its users. It shares data with advertisers, a lot of data:
The window...
Read more
Microsoft Is Spying on Users of Its AI Tools
February 20 2024Microsoft announced that it caught Chinese, Russian, and Iranian hackers using its AI tools—presumably coding tools—to improve their hacking abilities.
From their report:
In collaboration with OpenAI, we are...
Read more
Microsoft Executives Hacked
January 29 2024Microsoft is reporting that a Russian intelligence agency—the same one responsible for SolarWinds—accessed the email system of the company’s executives.
Beginning in late November 2023, the threat actor used...
Read more
Microsoft is Soft-Launching Security Copilot
October 25 2023Microsoft has announced an early access program for its LLM-based security chatbot assistant: Security Copilot. I am curious whether this thing is actually useful.
Read moreFBI Hacker Dropped Stolen Airbus Data on 9/11
September 14 2023In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBI's vetted information sharing network InfraGard, and was selling the contact information...
Read more
Recent Comments