"TotalRecall Reloaded" tool finds a side entrance to Windows 11's Recall database

Researcher Hagenah discovered TotalRecall Reloaded, a tool that exploits a vulnerability in Windows 11's Recall feature by intercepting data passed to AIXHost.exe, which lacks Recall's security protections. The tool can capture screenshots, OCR'd text, and metadata without administrator privileges, though some actions require Windows Hello authentication. Microsoft's Recall vault itself remains secure; the vulnerability is in the data delivery mechanism.