Microsoft announced its plan to deprecate Visual Basic Script (VBScript) by the second half of 2024, favoring more advanced alternatives like JavaScript and PowerShell. Initially introduced in 1996, VBScript allowed users to automate tasks and develop web pages but has become outdated in modern web development and automation. The deprecation plan consists of three phases, with VBScript becoming an on-demand feature in Windows 11 24H2 in the first phase, followed by a phase where it will no longer be enabled by default, and eventually being fully retired from the Windows operating system.
This move by Microsoft follows recent decisions to disable Excel 4.0 macros, Visual Basic for Applications macros, and block XLL add-ins, aimed at minimizing the attack surface against malicious activities. However, the deprecation of VBScript comes amidst criticism of Microsoft’s new Recall feature, an AI-powered system that records users’ activity on their PCs. Concerns have been raised about potential privacy violations and security implications, particularly regarding the lack of content moderation in Recall.
While Microsoft assures that Recall processes data locally and encrypts snapshots, critics argue that it could still pose risks if exploited by threat actors who compromise a system. Security researcher Kevin Beaumont described Recall as a “keylogger baked into Windows,” highlighting potential vulnerabilities. The U.K. Information Commissioner’s Office (ICO) is in contact with Microsoft to ensure user privacy safeguards are in place and that data protection regulations are upheld.
