JD Supra

YellowKey Zero-Day and the BitLocker Bypass: Compliance and Incident Response Implications

A publicly disclosed and widely unpatched zero-day vulnerability, named YellowKey, permits anyone with physical access to a device running Windows 11 or Windows Server 2022/2025 to bypass BitLocker ...
Hosted on MSN

Microsoft just rushed out a fix for 'YellowKey' — a Windows flaw that lets attackers pop open BitLocker-encrypted drives and read what's inside

Microsoft has confirmed a vulnerability in Windows Recovery Environment that can let an attacker with physical access bypass BitLocker encryption and read the contents of a protected drive. The flaw, ...
Hosted on MSN

This worrying Microsoft BitLocker backdoor can grant full access to a locked drive

Chaotic Eclipse leaks two new Windows flaws: YellowKey (BitLocker bypass) and GreenPlasma (privilege escalation) YellowKey abuses WinRE to bypass BitLocker; verified by Kevin Beaumont, though ...
Bleeping Computer

New ShrinkLocker ransomware decryptor recovers BitLocker password

Bitdefender has released a decryptor for the 'ShrinkLocker' ransomware strain, which uses Windows' built-in BitLocker drive encryption tool to lock victim's files. Discovered in May 2024 by ...
Bleeping Computer

Microsoft shares script to update Windows 10 WinRE with BitLocker fixes

Microsoft has released a PowerShell script to automate updating the Windows Recovery Environment (WinRE) partition in order to fix CVE-2024-20666, a vulnerability that allowed for BitLocker encryption ...
Ars Technica

Crucial and Samsung SSD encryption easily bypassed, MBAM/BitLocker on Windows 10

I'm not sure if anyone saw the news, but apparently Crucial's and Samsung's self-encrypting drives have very weak keys or key verification and is easily bypassed to get access to the encrypted data.