Microsoft security tools questioned for treating employees as threats

A Cracked Labs report, covered by The Register, examines how SIEM/UEBA and insider-risk tools from Microsoft (Sentinel, Purview) and Forcepoint/Everfox can enable pervasive workplace surveillance—monitoring communications, behavior, and activity; applying AI-based profiling; and scoring employee “risk.” While positioned for cybersecurity and compliance, the report and cited experts highlight risks of false positives, discriminatory or intrusive monitoring, and legal gaps, referencing EU/UK data protection and human rights frameworks, as well as U.S. regulatory attention (FTC, NLRB) and state laws. The piece argues these systems normalize treating employees as threats and calls for clearer safeguards and constraints.