Microsoft’s Recall feature faces renewed security concerns as a researcher demonstrates how a tool can bypass its protections. Despite encryption and biometric safeguards, a flaw in a rendering process allows unauthorized access to sensitive user data. Microsoft claims the behavior is within design, but experts argue the risk is too high for such personal information.
Cybersecurity researcher Alexander Hagenah has released TotalRecall Reloaded—an updated version of the same tool he used in 2024 to expose the original Recall’s glaring weaknesses.
David Weston, Microsoft’s corporate VP of security, told The Verge that existing timeout and anti-hammering protections limit any potential damage. Microsoft’s AI-powered Recall feature, which takes snapshots of nearly everything you do on a Windows PC, is back in the security hot seat. TotalRecall Reloaded exploits exactly that gap. By injecting a DLL payload into AIXHost.exe—no admin access required—the tool intercepts decrypted screenshots, OCR-processed text, and metadata as they flow out of the enclave for display. Microsoft disagrees that this is a vulnerability at all. After Hagenah submitted a full disclosure to the company’s Security Response Centre in March, Microsoft closed the case a month later, saying the behavior “operates within the current, documented security design of Recall.