Last week, we wrote about YellowKey, the BitLocker bypass that turns a missing Windows 11 laptop into a data exposure event. The proof-of-concept is public, Microsoft has assigned CVE-2026-45585 (CVSS 6.8), and a full security update still has no committed ship date. Mitigation guidance exists, but the choice between Microsoft’s WinRE fix and BitLocker+PIN is… Continue reading Update: YellowKey BitLocker Bypass White Paper Available
Tag: YellowKey
YellowKey BitLocker Bypass and GreenPlasma SYSTEM Escalation Hit Windows 11 and Server 2022/2025
Overview On May 12, 2026, a security researcher operating under the handles “Chaotic Eclipse” and “Nightmare-Eclipse” dropped two unpatched Windows zero-days on GitHub. The first, YellowKey, bypasses BitLocker drive encryption entirely on Windows 11, Windows Server 2022, and Windows Server 2025 using nothing more than a USB stick and a key press during boot. The… Continue reading YellowKey BitLocker Bypass and GreenPlasma SYSTEM Escalation Hit Windows 11 and Server 2022/2025