SecurityWeek

Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass

Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.
GIGAZINE

A vulnerability has been discovered that allows access to Microsoft BitLocker-protected drives using only files on a USB drive, without the recovery key.

A zero-day vulnerability called ' YellowKey,' which could potentially bypass Microsoft's BitLocker-encrypted drives, has been disclosed by security researcher Nightmare-Eclipse. Alongside this, ...

Zero-day exploit completely defeats default Windows 11 BitLocker protections

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker ...
TweakTown

Security researcher finds zero-day exploit that defeats Windows 11 BitLocker, calls it an insane 'backdoor' discovery

Users who rely solely on TPM-based BitLocker are most at risk, while those with a PIN or USB security key at boot are ...
HotHardware

YellowKey Tool Bypasses Windows 11 BitLocker Using Only a USB Stick

Update 5/21: Since this article was released, recommend mitigations for YellowKey and other attacks have been released, as well as a full patch for BlueHammer. Nightmare-Eclipse, a cybersecurity ...
Windows Report

Microsoft Criticizes YellowKey PoC as Researcher Fires Back

The YellowKey BitLocker exploit release has triggered another public clash between Microsoft and Nightmare-Eclipse.

Microsoft shares mitigation for YellowKey Windows zero-day

Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grants ...
Hosted on MSN

Researcher reveals USB-based BitLocker bypass in Windows 11

What is YellowKey?: A zero-day exploit allowing BitLocker bypass on Windows 11 and select servers using a USB stick and WinRE. Why it matters: It grants full access to encrypted drives without keys, ...
Windows Report

Microsoft Rushes to Mitigate Dangerous New “YellowKey” Windows Exploit

Microsoft rushes to mitigate the new “YellowKey” flaw that may bypass BitLocker protections and expose encrypted Windows ...

Microsoft Warns: Windows Zero-Day ‘YellowKey’ Can Bypass BitLocker

Microsoft has released a temporary mitigation for YellowKey, a Windows zero-day that can reportedly bypass BitLocker ...

Windows vulnerabilities: BitLocker problem and privilege escalation

The IT researcher behind the "NightmareEclipse" project shows new vulnerabilities: "YellowKey" in BitLocker and privilege escalation with "MiniPlasma".