Microsoft has announced its plans to phase out Visual Basic Script (VBScript) in the second half of 2024, replacing it with more advanced alternatives like JavaScript and PowerShell. This decision comes after the tech giant initially announced its deprecation plan in October 2023. VBScript was first introduced by Microsoft in 1996 as a scripting language for Windows, offering automation capabilities and interactive web development using Internet Explorer and Edge.
The deprecation plan for VBScript consists of three phases, with the first phase starting in the second half of 2024. During this phase, VBScript will be available as an on-demand feature in Windows 11 24H2. The second phase, expected around 2027, will have the on-demand feature but not enabled by default. Eventually, VBScript is set to be completely retired and removed from the Windows operating system.
The move to phase out VBScript is part of Microsoft’s efforts to minimize the attack surface and combat malicious activities by threat actors. NT LAN Manager (NTLM) is another feature being deprecated in Windows 11 in favor of Kerberos for authentication. Microsoft has also disabled Excel 4.0 Macros (XLM), Visual Basic for Applications (VBA) Macros, XLL plugins, and implemented measures to prevent users from opening risky file extensions in OneNote.
In addition to these changes, Microsoft has introduced a new feature called Recall, powered by artificial intelligence (AI), that allows users to access a timeline of their PC’s past events. The Recall system periodically saves snapshots of the user’s active window, extracts data using screen segmentation and image recognition, and stores it in a semantic index. Third-party app developers can leverage this feature to enable users to semantically search and display content related to their applications.
While Microsoft emphasizes that Recall processes content locally on the device and encrypts snapshots, concerns have been raised about user privacy and data protection. The UK Information Commissioner’s Office (ICO) is in contact with Microsoft to understand the safeguards in place to protect user privacy. Security researcher Kevin Beaumont has described Recall as a “keylogger” built into Windows, raising concerns about the lack of security barriers that could potentially allow threat actors to access valuable information.
Overall, Microsoft’s decision to phase out VBScript in favor of more advanced alternatives reflects the evolution of technology and the need to enhance security measures to protect users from malicious activities. The introduction of Recall, while innovative, also raises important questions about data privacy and security measures in place to safeguard user information.
Article Source
https://thehackernews.com/2024/05/the-end-of-era-microsoft-phases-out.html