US Edition"TotalRecall Reloaded" tool finds a side entrance to Windows 11's Recall database
Alexander Hagenah says the tool can extract screenshots and OCR text without administrator privileges, while Microsoft says the issue is not a vulnerability.
- On April 3, 2026, Microsoft officially classified Alexander Hagenah's findings regarding Windows Recall as "not a vulnerability," rejecting claims of a security flaw in the feature.
- Security researcher Hagenah created the TotalRecall Reloaded tool to test Windows Recall, which captures screenshots and metadata of user activity to facilitate content searching.
- Hagenah reported that his tool injects a DLL into the AIXHost process, bypassing security boundaries after Windows Hello authentication to extract sensitive data.
- Microsoft maintains the architecture functions as intended, though Hagenah stated, "My research shows that the vault is real," disputing the company's security assessment.
- Despite not planning to address the issue, Microsoft notes that Windows Recall is optional and can be disabled to mitigate potential privacy risks.
19 Articles
19 Articles
Open-source tool decrypts all private data collected by Windows Recall on Copilot PCs
Alexander Hagenah previously exposed issues affecting Windows Recall with his TotalRecall tool, prompting Microsoft to redesign the feature around stronger architectural principles. Now, the security researcher is once again highlighting Recall's weaknesses with TotalRecall Reloaded. The updated tool can reportedly bypass protections in Recall and access private user data stored...Read Entire Article
Windows automatic screenshots feature called Recall can be leveraged by hackers to violate your privacy
One year after Windows Recall was rebooted, security researcher Alexander Hagenah has released a tool that can capture all recall data in plain text. Microsoft refuses to acknowledge this as a vulnerability.
Coverage Details
Bias Distribution
- 80% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
