Microsoft's Voice Clone Becomes Scary & Unsalvageable

The report details Microsoft’s decision to halt general release of the 'Speak for Me' voice-cloning feature after finding numerous security flaws across the desktop client and cloud back end—including path traversal, insecure global blob storage, encryption key mismanagement, notification-service abuse, runtime memory exposure, and watermarking failures—that could enable large-scale deepfake impersonation, vishing, and financial fraud. Given the high abuse potential and lack of feasible mitigations for general-purpose devices, Microsoft limited access and required manual verification for specialized cases.