SecurityWeek

Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass

Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.
Morning Overview on MSN

A newly found Windows flaw called 'YellowKey' lets attackers unlock BitLocker-encrypted drives — and Microsoft just rushed out an emergency fix

Microsoft broke from its regular monthly patch schedule in late May 2026 to push an emergency fix for a vulnerability that ...

Windows BitLocker exploit sparks messy feud between Microsoft and the researcher who exposed it

The issue centers on a zero-day exploit called "YellowKey," published earlier this month by a security researcher known as Chaotic Eclipse, also known online as Nightmare-Eclipse.
PC Magazine

Travel Smarter: How to Keep Your Laptop Safe With BitLocker Encryption

I always take my laptop with me when I travel, which means I'll inevitably have to leave it unattended in the hotel room or airport security line. To ensure my personal data is protected if my PC is ...
Bleeping Computer

Windows BitLocker zero-day gives access to protected drives, PoC released

A cybersecurity researcher has published proof-of-concept (PoC) exploits for two unpatched Microsoft Windows vulnerabilities named YellowKey and GreenPlasma, which are a BitLocker bypass and a ...

Zero-day exploit completely defeats default Windows 11 BitLocker protections

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker ...

Windows vulnerabilities: BitLocker problem and privilege escalation

The IT researcher behind the "NightmareEclipse" project shows new vulnerabilities: "YellowKey" in BitLocker and privilege escalation with "MiniPlasma".

Attack bypasses BitLocker using Windows Recovery Environment

BitLocker is intended to protect confidential data from physical attacks. The Windows Recovery Environment bypasses the protection.
Morning Overview on MSN

Microsoft just rushed out a fix for 'YellowKey' — a Windows flaw that lets attackers pop open BitLocker-encrypted drives and read what's inside

Microsoft has confirmed a vulnerability in Windows Recovery Environment that can let an attacker with physical access bypass ...
Windows Report

Microsoft Rushes to Mitigate Dangerous New “YellowKey” Windows Exploit

Microsoft rushes to mitigate the new “YellowKey” flaw that may bypass BitLocker protections and expose encrypted Windows ...
GIGAZINE

A vulnerability has been discovered that allows access to Microsoft BitLocker-protected drives using only files on a USB drive, without the recovery key.

A zero-day vulnerability called ' YellowKey,' which could potentially bypass Microsoft's BitLocker-encrypted drives, has been disclosed by security researcher Nightmare-Eclipse. Alongside this, ...
Dark Reading

Windows Zero-Day Barrage Continues After Patch Tuesday

YellowKey, GreenPlasma, and MiniPlasma add to growing list of vulns a security researcher has disclosed over the past 6 weeks ...