Security researcher Chaotic Eclipse, also known online as Nightmare-Eclipse, has disclosed two new Windows zero-day exploits named YellowKey and GreenPlasma. The vulnerabilities target BitLocker ...

The Epitome of WTF: A researcher known as "Nightmare-Eclipse" recently released YellowKey, a security vulnerability that allegedly enables a full bypass of BitLocker's full-volume encryption. The ...

Microsoft says it is considering a patch for a zero-day vulnerability, dubbed YellowKey, that allows attackers with access to a Windows device to bypass Bitlocker encryption protection and read and ...

Microsoft added drive encryption to Windows with BitLocker, which is also intended to withstand physical attacks, thus intercepting cases where devices are stolen, for example. However, ...

Microsoft has addressed a known issue causing some Windows 11 systems to boot into BitLocker recovery after installing the April 2026 Windows security updates. BitLocker is a Windows security feature ...

Update 5/21: Since this article was released, recommend mitigations for YellowKey and other attacks have been released, as well as a full patch for BlueHammer. Nightmare-Eclipse, a cybersecurity ...

A cybersecurity researcher has published proof-of-concept (PoC) exploits for two unpatched Microsoft Windows vulnerabilities named YellowKey and GreenPlasma, which are a BitLocker bypass and a ...

Microsoft provided the FBI with BitLocker encryption recovery keys following a warrant request, allowing federal agents to decrypt hard drives belonging to suspects in an alleged fraud investigation ...

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker protections and gain complete access to an encrypted drive within seconds.

The issue centers on a zero-day exploit called "YellowKey," published earlier this month by a security researcher known as Chaotic Eclipse, also known online as Nightmare-Eclipse.

Two unpatched Windows exploit PoCs target BitLocker protections and privilege controls after Microsoft’s May Patch Tuesday security update. Microsoft’s quiet Patch Tuesday did not stay quiet for long.