{"id":3071,"date":"2025-11-19T04:14:02","date_gmt":"2025-11-19T11:14:02","guid":{"rendered":"https:\/\/catbradley.io\/?p=3071"},"modified":"2025-11-19T04:14:02","modified_gmt":"2025-11-19T11:14:02","slug":"microsofts-new-windows-ai-feature-comes-with-warnings-about-malware-and-data-theft","status":"publish","type":"post","link":"https:\/\/catbradley.io\/?p=3071","title":{"rendered":"Microsoft’s New Windows AI Feature Comes With Warnings About Malware and Data Theft"},"content":{"rendered":"

\"Microsoft's<\/p>\n

If you ask me, Microsoft has been one of the biggest driving forces behind Linux adoption<\/strong> in recent years. The way they’ve been handling Windows, with its forced updates, aggressive telemetry, and questionable AI features<\/a>, has sent more people to Linux than any marketing campaign ever could.<\/p>\n

And they are at it again with a new AI feature that could be tricked into installing malware on your system.<\/p>\n

Isn’t This Too Much?<\/h2>\n
<\/figure>\n

Microsoft is rolling out a new experimental feature called “Copilot Actions<\/a>” to Windows Insiders. They pitch it as an AI agent that handles tasks you describe to it<\/strong>. Organize vacation photos, sort your Downloads<\/em> folder, extract info from PDFs, that sort of thing.<\/p>\n

It is currently available in Windows 11 Insider builds (version 26220.7262<\/em>) as part of Copilot Labs and is off by default<\/strong>, requiring admin access to set it up.<\/p>\n

But here’s the catch. Copilot Actions isn’t just suggesting what to do. It runs in a separate environment called “Agent Workspace<\/em><\/strong>” with its unique user account, clicking through apps and working on your files.<\/p>\n

Microsoft says it has “capabilities like its own desktop<\/a>” and can “interact with apps in parallel to your own session<\/a>.” And that’s where the problems start<\/strong>.<\/p>\n

In a support document (linked above<\/em>), Microsoft admits that features like Copilot Actions introduce “novel security risks<\/em><\/strong>.” They warn about cross-prompt injection<\/a> (XPIA), where malicious content in documents or UI elements can override the AI’s instructions.<\/p>\n

The result? “Unintended actions like data exfiltration or malware installation<\/em><\/strong>.”
Yeah, you read that right. Microsoft is shipping a feature that could be tricked into installing malware on your system.<\/p>\n

Microsoft’s own warning hits hard<\/strong>: “We recommend that you only enable this feature if you understand the security implications<\/em>.” <\/p>\n

When you try to enable these experimental features, Windows shows you a warning dialog that you have to acknowledge. \ud83d\udc47<\/p>\n

\"Microsoft's
Source: <\/em><\/i>Microsoft<\/em><\/i><\/a><\/figcaption><\/figure>\n

Even with these warnings, the level of access Copilot Actions demands is concerning<\/strong>. When you enable the feature, it gets read and write access to your Documents<\/em>, Downloads<\/em>, Desktop<\/em>, Pictures<\/em>, Videos<\/em>, and Music<\/em> folders.<\/p>\n

Windows Latest notes that<\/a>, unlike Windows Sandbox, which runs in complete isolation and gets wiped clean when you close it, Copilot Actions operates in “Agent Workspace<\/em>” with persistent user accounts that keep access to these folders across sessions. Also keep in mind that the feature can also access any apps installed for all users on a system.<\/p>\n

Microsoft says they are implementing safeguards<\/strong>. All actions are logged, users must approve data access requests, the feature operates in isolated workspaces, and the system uses audit logs to track activity.<\/p>\n

But you are still giving an AI system that can “hallucinate and produce unexpected outputs<\/strong><\/em>” (Microsoft’s words, not mine<\/em>) full access to your personal files.<\/p>\n

Closing Thoughts<\/h2>\n

There is a pattern here. Microsoft seems obsessed with shoving AI into every corner of Windows<\/strong>, whether users want it or not, whether it’s ready or not, while simultaneously playing around with the data of its users.<\/p>\n

This is why Linux keeps gaining traction<\/strong>. No AI experiments that could install malware, and no fighting against features you never asked for. Plus, the most likely way you will nuke your installation is if you deliberately run something like rm -rf<\/code> yourself, not because Copilot got confused by a malicious PDF.<\/p>\n

If Microsoft’s AI experiments are making you uncomfortable, then there are plenty of Linux distributions<\/a> that respect your privacy and put you in control.<\/p>\n

Suggested Reads \ud83d\udcd6<\/strong><\/p>\n

\n
\n
Best Linux Distributions For Everyone in 2025<\/div>\n
Looking for the best Linux distribution that suits everyone? Take a look at our comprehensive list.<\/div>\n
\"Microsoft'sIt’s FOSS<\/span>Ankush Das<\/span><\/div>\n<\/div>\n
\"Microsoft's<\/div>\n

<\/p><\/a><\/figure>\n

\n
\n
Microsoft Recall Exposes Passwords and Banking Data!<\/div>\n
New tests reveal Microsoft Recall still screenshots sensitive data.<\/div>\n
\"Microsoft'sIt’s FOSS<\/span>Sourav Rudra<\/span><\/div>\n<\/div>\n
\"Microsoft's<\/div>\n

<\/p><\/a><\/figure>","protected":false},"excerpt":{"rendered":"

If you ask me, Microsoft has been one of the biggest driving forces behind Linux adoption in recent years. The way they’ve been handling Windows, with its forced updates, aggressive…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3071","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-rss"],"_links":{"self":[{"href":"https:\/\/catbradley.io\/index.php?rest_route=\/wp\/v2\/posts\/3071","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/catbradley.io\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/catbradley.io\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/catbradley.io\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/catbradley.io\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3071"}],"version-history":[{"count":0,"href":"https:\/\/catbradley.io\/index.php?rest_route=\/wp\/v2\/posts\/3071\/revisions"}],"wp:attachment":[{"href":"https:\/\/catbradley.io\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/catbradley.io\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/catbradley.io\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}