HomeAI · summaries
Storia in 8 fonti
Zero-Day Exploit Against Windows BitLocker - Schneier on Security
It’s nasty, but it requires physical access to the computer: The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse. It reliably bypasses default Windows 11 deployments of BitLocker, the full-volume encryption protection Microsoft provides to make disk contents off-limits to anyone without the decryption key, which is stored in a secured piece of hardware known as a trusted platform module (TPM). BitLocker is a mandatory protection for many organizations, including those that contract with governments...
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
schneier.com
Zero-Day Exploit Against Windows BitLocker - Schneier on Security
It’s nasty, but it requires physical access to the computer: The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse.…
- ·
heise.de
Windows-Sicherheitslücken: BitLocker-Problem und Rechteausweitung
Der IT-Forscher hinter dem „NightmareEclipse“-Projekt zeigt neue Lücken: „YellowKey“ in BitLocker und Rechteausweitung mit „MiniPlasma“.
- ·
Windows vulnerabilities: BitLocker problem and privilege escalation
The IT researcher behind the "NightmareEclipse" project shows new vulnerabilities: "YellowKey" in BitLocker and privilege escalation with "MiniPlasma".
- ·
ilsoftware.it
Davvero c'è una backdoor in Windows 11 con BitLocker?
Un exploit contro BitLocker su Windows 11 riapre il dibattito su TPM, cifratura e possibili backdoor sul sistema Microsoft.
- ·
computerworld.com
Microsoft is working on a patch for 'YellowKey' attack on Bitlocker, offers temporary fix
Exploitation requires physical access, so enterprises should look to their device security policies.
- ·
forbes.com
How To Mitigate The Microsoft Windows BitLocker ‘Angry Hacker’ 0-Day
Following the release of a BitLocker zero-day security bypass by a disgruntled hacker, Microsoft has now offered mitigation advice until a patch is available.
- ·
bleepingcomputer.com
Microsoft shares mitigation for YellowKey Windows zero-day
Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grants access to protected drives.
- ·
thehackernews.com
Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit
Microsoft released mitigations for YellowKey, a publicly disclosed BitLocker bypass tracked as CVE-2026-45585 with a CVSS score of 6.8.
- ·
securityweek.com
Microsoft Rolls Out Mitigations for 'YellowKey' BitLocker Bypass
Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.