A cybersecurity researcher says Recall’s redesigned security model does not stop same-user malware from accessing plaintext ...

When Microsoft tried to launch Recall, an AI-powered Windows feature that screenshots most of what you do on your PC, it was ...

Microsoft recently uncovered a large-scale, sophisticated AI-driven phishing campaign that uses automation and legitimate authentication processes to compromise accounts more effectively than ...

A financially motivated threat actor tracked as Storm-2755 is stealing Canadian employees' salary payments after hijacking ...

Windows Recall's database may be better protected now, but a new proof of concept suggests the data path after sign in still creates privacy risks for Windows 11 users.

Microsoft assigned CVE-2026-21520 to a Copilot Studio prompt injection vulnerability and patched it in January — but in ...

Threat actors using a previously undocumented phishing-as-a-service (PhaaS) platform called "VENOM" are targeting credentials ...

Windows Recall still faces serious security concerns as the TotalRecall tool demonstrates ongoing risks of silent data extraction.

Microsoft Threat Intelligence says cybercriminals are using AI across nearly every stage of a cyberattack to move faster and ...

Elevation-of-privilege bugs accounted for more than half of the 165 vulnerabilities patched, with two zero-days in that mix.

Now, Hagenah has again found what he sees as a new vulnerability in Recall, which he said allows full content extraction from ...