What CISOs need to know about Microsoft’s Copilot+
But that’s not what has some in the security industry concerned. Additional software called Recall will take snapshots and images and store them locally on the device so that you can review and roll back to remind yourself of what file, website, or app you were using in the past.
The Recall feature introduces some alarming possibilities
As Microsoft states: “Now with Recall, you can access virtually what you have seen or done on your PC in a way that feels like having photographic memory. Copilot+ PCs organize information like we do — based on relationships and associations unique to each of our individual experiences. This helps you remember things you may have forgotten so you can find what you’re looking for quickly and intuitively by simply using the cues you remember.”
Microsoft indicates that these files of “recall” images will only be available to the user, cannot be accessed in the cloud, and will be protected by encryption on the device. In the second half of 2024, Microsoft will enable encryption on the device by default, even on Windows Home computer systems, whereas in the past, encryption was enabled by logging in to a Microsoft account or Entra ID and the recovery key password was automatically saved.
