JD Supra

YellowKey Zero-Day and the BitLocker Bypass: Compliance and Incident Response Implications

A publicly disclosed and widely unpatched zero-day vulnerability, named YellowKey, permits anyone with physical access to a device running Windows 11 or Windows Server 2022/2025 to bypass BitLocker ...
Ars Technica

Crucial and Samsung SSD encryption easily bypassed, MBAM/BitLocker on Windows 10

I'm not sure if anyone saw the news, but apparently Crucial's and Samsung's self-encrypting drives have very weak keys or key verification and is easily bypassed to get access to the encrypted data.
Hosted on MSN

This worrying Microsoft BitLocker backdoor can grant full access to a locked drive

Chaotic Eclipse leaks two new Windows flaws: YellowKey (BitLocker bypass) and GreenPlasma (privilege escalation) YellowKey abuses WinRE to bypass BitLocker; verified by Kevin Beaumont, though ...
Bleeping Computer

Microsoft shares script to update Windows 10 WinRE with BitLocker fixes

Microsoft has released a PowerShell script to automate updating the Windows Recovery Environment (WinRE) partition in order to fix CVE-2024-20666, a vulnerability that allowed for BitLocker encryption ...