Microsoft Added AI to Notepad and It Created a Security Failure Because the AI Was Stupidly Easy for Hackers to Trick
Briefly

Microsoft Added AI to Notepad and It Created a Security Failure Because the AI Was Stupidly Easy for Hackers to Trick
"As Microsoft continues to force AI features onto users of its Windows operating system and other crucial software, glaring issues keep cropping up. Executives have promised to turn the platform into an " agentic OS" to the dismay of many users, with CEO Satya Nadella boasting that much of the company's code is now being written by AI - while condemning those who use the newly-minted pejorative "Microslop.""
"Even the company's Notepad app, which once allowed users to jot down notes in plain text, has turned into a bloated, AI-enhanced security liability. As malware researchers from the collective vx-underground found, the app has a "remote code execution zero-day" - meaning a vulnerability in software unknown even to its creators. According to Microsoft documentation of the bug, "improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code over a network.""
Microsoft's aggressive AI integration into Windows and essential software is coinciding with rising stability and security problems. Executives aim to turn the platform into an "agentic OS" while claiming significant portions of code are generated by AI. Recent issues include Windows 11 enterprise machines stuck in shutdown loops and a Notepad remote code execution zero-day that allows attackers to execute code via malicious Markdown links and unverified protocols. The Notepad bug was documented and later patched in monthly updates. Additional AI features, such as the Recall screenshot capability, have raised serious privacy and security concerns for users.
Read at Futurism
Unable to calculate read time
[
|
]