Windows BitLocker exploit sparks messy feud between Microsoft and the researcher who exposed it

The issue centers on a zero-day exploit called "YellowKey," published earlier this month by a security researcher known as Chaotic Eclipse, also known online as Nightmare-Eclipse.
Morning Overview on MSN

A newly found Windows flaw called 'YellowKey' lets attackers unlock BitLocker-encrypted drives — and Microsoft just rushed out an emergency fix

Microsoft broke from its regular monthly patch schedule in late May 2026 to push an emergency fix for a vulnerability that ...
Bleeping Computer

Windows BitLocker zero-day gives access to protected drives, PoC released

A cybersecurity researcher has published proof-of-concept (PoC) exploits for two unpatched Microsoft Windows vulnerabilities named YellowKey and GreenPlasma, which are a BitLocker bypass and a ...
SecurityWeek

Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass

Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.
PC Magazine

Travel Smarter: How to Keep Your Laptop Safe With BitLocker Encryption

I always take my laptop with me when I travel, which means I'll inevitably have to leave it unattended in the hotel room or airport security line. To ensure my personal data is protected if my PC is ...

Zero-day exploit completely defeats default Windows 11 BitLocker protections

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker ...
Morning Overview on MSN

Microsoft just rushed out a fix for 'YellowKey' — a Windows flaw that lets attackers pop open BitLocker-encrypted drives and read what's inside

Microsoft has confirmed a vulnerability in Windows Recovery Environment that can let an attacker with physical access bypass ...

Windows vulnerabilities: BitLocker problem and privilege escalation

The IT researcher behind the "NightmareEclipse" project shows new vulnerabilities: "YellowKey" in BitLocker and privilege escalation with "MiniPlasma".
IT News For Australia Business

USB stick opens Windows BitLocker drives in new zero-day

An unnamed security researcher using the monikers "Nightmare-Eclipse" and "Chaotic Eclipse" has published a simple bypass for Microsoft's disk encryption technology BitLocker on Windows, using a ...
TechSpot

A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it

The Epitome of WTF: A researcher known as "Nightmare-Eclipse" recently released YellowKey, a security vulnerability that allegedly enables a full bypass of BitLocker's full-volume encryption. The ...
GIGAZINE

A vulnerability has been discovered that allows access to Microsoft BitLocker-protected drives using only files on a USB drive, without the recovery key.

A zero-day vulnerability called ' YellowKey,' which could potentially bypass Microsoft's BitLocker-encrypted drives, has been disclosed by security researcher Nightmare-Eclipse. Alongside this, ...