Welcome to the very first issue of Mailfence’s “This Month in Privacy” newsletter! Thank you for joining us on this ride. With this newsletter, we aim to shed light on the most important privacy topics of the day, as well as providing a critical eye thanks to our 20+ years of experience in the privacy and cybersecurity space.
This month, we bring you stories from Microsoft’s latest AI feature, the rise of QR-code phishing as well as our privacy tip of the month: emails aliases. Enjoy!
Microsoft rolls out its “privacy nightmare” tool
Microsoft’s Copilot+ Recall feature is back, this time with crucial changes following its aborted launch back in 2024.
As a quick reminder, Recall is an AI-powered feature in Windows 11 that captures periodic screenshots of your screen, creating a searchable visual timeline of files, chats, websites, and apps, even if they’ve been closed. Microsoft pitches it as a memory assistant to improve productivity.
Originally introduced last year, the feature was swiftly paused after widespread criticism over privacy and security risks. Back then, Recall was enabled by default, with minimal user awareness and limited opt-out options.
In the newly relaunched version, Microsoft has made key adjustments. Most notably, Recall is now opt-in during setup rather than being automatically enabled. Data remains stored locally on the device, and users can pause or delete snapshots at any time. Additional safeguards include encryption of the snapshot index and support for Windows Hello biometric authentication to access Recall content.
Security experts continue to flag risks: Recall could inadvertently log passwords, sensitive documents, or private communications, making it a rich target for malware or unauthorized access. The UK’s Information Commissioner’s Office (ICO) has said it’s actively engaging with Microsoft to evaluate the feature’s compliance with privacy laws.
QR-Phishing is on the Rise
Cybercriminals are taking phishing attacks to the streets by placing malicious QR codes in public spaces, such as lampposts and parking meters.
These QR codes often come with emotionally charged messages designed to entice individuals to scan them. Once scanned, victims are directed to fraudulent websites aiming to steal personal and financial information. This tactic, known as “quishing,” bypasses traditional cybersecurity defenses and exploits human psychology.
With a significant rise in such attacks reported in recent years, it’s crucial to remain vigilant. Avoid scanning unsolicited QR codes in public areas and verify the legitimacy of any QR code before interacting with it
Your might also like:
- Ransomware Attacks Are Surging – 8 Steps to Stay Safe
- Phishing 101: Common Tactics and How to Stay Safe
- Spam vs. Phishing: What’s the Difference?
Privacy Tip of the Month
This month, we are bringing you one of the most underutilised privacy tips out there: email aliases.
An email alias is an additional email address linked to your primary mailbox, allowing messages sent to the alias to arrive in your main inbox. This provides privacy, organization, and flexibility without the need to manage multiple accounts
Using an alias helps protect your primary email from spam and potential leaks when signing up for online services. It also allows for better email management by categorizing communications based on purpose, such as work, personal use, or subscriptions. If an alias starts receiving unwanted messages, it can be disabled without affecting the main email address.
For businesses and freelancers, aliases create a professional image by using addresses like “info@example.com” or “support@example.com,” which appear more formal and credible. Unlike separate mailboxes, aliases share the same storage as the primary account, do not require additional logins, and often come at no extra cost.
An email alias significantly enhances online privacy by acting as a shield for your primary email address. When signing up for websites, newsletters, or online services, using an alias prevents your main address from being exposed to potential data breaches, spam lists, or phishing attempts. If an alias starts receiving excessive unwanted emails or is compromised, it can be deactivated or replaced without affecting your main inbox. This reduces the risk of identity tracking, minimizes unwanted marketing emails, and helps maintain a cleaner, more secure online presence while keeping personal communications private.
With Mailfence, creating an alias is a straightforward process that involves accessing account settings, navigating to alias options, and adding a new address. All emails sent to the alias will then be received in the main inbox. To learn more, head over to our website and create your account today!
Profitable reading
- Keeping People Safe Online – Fundamental Rights Protective Alternatives to Age Checks
- Montana Becomes First State to Close the Law Enforcement Data Broker Loophole
- How Signal, WhatsApp, Apple, and Google Handle Encrypted Chat Backups
- Investing in privacy-respecting companies that are raising the standard of trust online
- Mysterious Database of 184 Million Records Exposes Vast Array of Login Credentials
- ‘AI washing’: regulatory and private actions to stop overstating claims
- More than a fingerprint: Reclaiming privacy in biometric systems
That’s it for now!
We hope you enjoyed this newsletter! We look forward to bringing more news from the world of online privacy and cybersecurity next month.
On a side note, we have just released our private and secure Calendar app inside of the Mailfence mobile app, available on both iOS and Android. We are very proud of this release, and hope you’ll enjoy it!
Best,
Patrick
Get the latest privacy news in your inbox
Sign up to the Mailfence Newsletter.
