Stealing Your Data Via TotalRecall Reloaded Is A Feature, Not A Bug? - PC Perspective

A researcher says Microsoft Recall still has a serious exposure path via DLL injection into AIXHost.exe.

The attack does not require admin privileges and may capture screenshots, OCR text, and other metadata in real time.

The data could be intercepted even after a Recall session is closed.

Microsoft says it does not consider the issue a vulnerability and does not plan a fix.