Microsoft’s AI Recall Tool Is Still Sucking Up Credit Card and Social Security Numbers

This report summarizes several active security incidents: Microsoft Recall captured sensitive data despite filters, US indictments of North Korean operators who stole and extorted business data, active exploitation of a Cleo file‑sharing vulnerability with Malichus malware affecting dozens of organizations, and a large-scale Chinese APT campaign that exploited a zero‑day to hijack tens of thousands of firewalls (including U.S. infrastructure) leading to sanctions and an individual indictment.