Security researcher discovers Microsoft's Recall tool is woefully insecure

A security researcher found Microsoft's newly introduced AI feature, Windows Recall, on Windows 11 Copilot+ PCs, to be insecure. The data collected by Recall is stored locally and is unencrypted when a user is logged in. Although encrypted when logged out, the data is vulnerable to malware attacks when the user is active, raising security concerns.

• Windows Recall is a new AI feature on Windows 11.
• Recall stores user data locally without encryption.
• Feature is part of Windows 11 Copilot+ PCs.
• Data is encrypted only when the user is logged out.
• Backlash exists against potential malware scraping.