Windows Recall Security Flaw Exposed Again

A cybersecurity researcher has released TotalRecall Reloaded, a tool that extracts all data stored by Microsoft's Windows Recall feature. The tool can silently force a Windows Hello authentication prompt and then harvest everything Recall has ever captured, directly contradicting Microsoft's claims that its secure enclave prevents malware from exploiting user authentication. Microsoft closed the researcher's vulnerability report, stating the access patterns align with intended protections. However, researcher Alexander Hagenah disputes this, noting he can bypass timeout protections and that the tool can even extract cached screenshots without any authentication at all.