{"id":33566,"date":"2024-07-23T22:32:31","date_gmt":"2024-07-23T20:32:31","guid":{"rendered":"https:\/\/www.kaspersky.co.za\/blog\/it-compliance-of-microsoft-copilot-recall-apple-intelligence-google-astra\/33566\/"},"modified":"2024-07-23T22:32:31","modified_gmt":"2024-07-23T20:32:31","slug":"it-compliance-of-microsoft-copilot-recall-apple-intelligence-google-astra","status":"publish","type":"post","link":"https:\/\/www.kaspersky.co.za\/blog\/it-compliance-of-microsoft-copilot-recall-apple-intelligence-google-astra\/33566\/","title":{"rendered":"How to prepare corporate cybersecurity for all-seeing AI assistants"},"content":{"rendered":"

Throughout May and June, the IT world watched the unfolding drama of Copilot+ Recall. First came Microsoft\u2019s announcement<\/a> of the \u201cmemory\u201d feature named Recall that takes screenshots of everything happening on a computer every few seconds and extracting all useful information into a shared database. Then, cybersecurity researchers criticized<\/a> Recall\u2019s implementation by exposing security flaws and demonstrating<\/a> the potential for data exfiltration \u2014 including of the remote kind. This forced Microsoft to backpedal: first stating<\/a> the feature wouldn\u2019t be enabled by default and promising improved encryption, and then delaying the mass rollout of Recall entirely \u2014 opting to first test it in the Windows Insider Program beta. Despite this setback, Redmond remains committed to the project and plans to launch it on a broad range of computers \u2014 including those with AMD and Intel CPUs.<\/p>\n

Within the context of devices in the workplace \u2014 especially if a company allows BYOD \u2014 Recall clearly violates corporate data retention policies and significantly amplifies potential damage if a network is compromised by infostealers or ransomware. What\u2019s more concerning is the clear intention of Microsoft\u2019s competitors to follow this trend. The recently announced Apple Intelligence<\/a> is still shrouded in marketing language, but the company claims that Siri will have \u201conscreen awareness\u201d when processing requests, and text-handling tools available across all apps will be capable of both local or ChatGPT-powered processing. While Google\u2019s equivalent features remain under wraps, the company has confirmed<\/a> that Project Astra \u2014 the visual assistant announced at Google I\/O \u2014 \u00a0will eventually find its way onto Chromebooks, utilizing screenshots as the input data stream. How should IT and cybersecurity teams prepare for this deluge of AI-powered features?<\/p>\n

Risks of visual assistants<\/h2>\n

We previously discussed how to mitigate the risks of unchecked ChatGPT and other AI assistants\u2019 usage by employees in this article<\/a>. However, there we focused on the deliberate adoption of additional apps and services by employees themselves \u2014 a new and troublesome breed of shadow IT<\/a>. OS-level assistants present a more complex challenge:<\/p>\n