SecurityWeek

‘GreatXML’ Zero-Day Exploit Bypasses BitLocker

GreatXML, a new Windows BitLocker bypass exploit, targets a zero-day vulnerability in Microsoft Defender’s offline scan.
SecurityWeek

New Windows Zero-Day Exploit ‘RoguePlanet’ Released

A security researcher has released RoguePlanet, a Windows zero-day exploit leading to local privilege escalation to SYSTEM.

Microsoft Exchange hacked, Defender broken, BitLocker bypassed

While there weren’t any genuine zero-day vulnerabilities to patch in May’s Patch Tuesday update, the fallout since then has been severe. The first attacks on Microsoft Exchange Server occurred as ...
Morning Overview on MSN

Microsoft just rushed out a fix for 'YellowKey' — a Windows flaw that lets attackers pop open BitLocker-encrypted drives and read what's inside

Microsoft has confirmed a vulnerability in Windows Recovery Environment that can let an attacker with physical access bypass BitLocker encryption and read the contents of a protected drive. The flaw, ...
TweakTown

Security researcher finds zero-day exploit that defeats Windows 11 BitLocker, calls it an insane 'backdoor' discovery

Use left and right arrow keys to seek audio. A security researcher going by the alias Nightmare-Eclipse has uncovered a zero-day exploit they describe as one of the most insane discoveries ever, ...
Forbes

Microsoft Windows BitLocker Vulnerability Exposes Passwords—Act Now

Password theft, by the billion, has been in the news recently, as has Microsoft’s desire to replace the security measure for all users. Security experts have now warned that a vulnerability impacting ...
TechSpot

A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it

The Epitome of WTF: A researcher known as "Nightmare-Eclipse" recently released YellowKey, a security vulnerability that allegedly enables a full bypass of BitLocker's full-volume encryption. The ...
Forbes

How To Mitigate The Microsoft Windows BitLocker YellowKey USB 0-Day

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Microsoft publishes angry hacker YellowKey zero-day mitigation. As an angry hacker going by ...
Bleeping Computer

New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released

A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "MiniPlasma" that lets attackers gain SYSTEM privileges on fully patched Windows ...

Windows BitLocker exploit sparks messy feud between Microsoft and the researcher who exposed it

The issue centers on a zero-day exploit called "YellowKey," published earlier this month by a security researcher known as Chaotic Eclipse, also known online as Nightmare-Eclipse.