JD Supra

YellowKey Zero-Day and the BitLocker Bypass: Compliance and Incident Response Implications

A publicly disclosed and widely unpatched zero-day vulnerability, named YellowKey, permits anyone with physical access to a device running Windows 11 or Windows Server 2022/2025 to bypass BitLocker ...
Hosted on MSN

Microsoft just rushed out a fix for 'YellowKey' — a Windows flaw that lets attackers pop open BitLocker-encrypted drives and read what's inside

Microsoft has confirmed a vulnerability in Windows Recovery Environment that can let an attacker with physical access bypass BitLocker encryption and read the contents of a protected drive. The flaw, ...
Hosted on MSN

This worrying Microsoft BitLocker backdoor can grant full access to a locked drive

Chaotic Eclipse leaks two new Windows flaws: YellowKey (BitLocker bypass) and GreenPlasma (privilege escalation) YellowKey abuses WinRE to bypass BitLocker; verified by Kevin Beaumont, though ...
Ars Technica

Crucial and Samsung SSD encryption easily bypassed, MBAM/BitLocker on Windows 10

I'm not sure if anyone saw the news, but apparently Crucial's and Samsung's self-encrypting drives have very weak keys or key verification and is easily bypassed to get access to the encrypted data.
Bleeping Computer

Microsoft shares script to update Windows 10 WinRE with BitLocker fixes

Microsoft has released a PowerShell script to automate updating the Windows Recovery Environment (WinRE) partition in order to fix CVE-2024-20666, a vulnerability that allowed for BitLocker encryption ...
Bleeping Computer

New ShrinkLocker ransomware decryptor recovers BitLocker password

Bitdefender has released a decryptor for the 'ShrinkLocker' ransomware strain, which uses Windows' built-in BitLocker drive encryption tool to lock victim's files. Discovered in May 2024 by ...