Microsoft is facing fresh scrutiny after reports on May 13–14, 2026 described YellowKey, a publicly disclosed BitLocker bypass aimed at Windows recovery behavior, alongside GreenPlasma, a separate alleged Windows local privilege-escalation flaw tied to CTFMon and Object Manager internals. The...
BitUnlocker is a proof-of-concept attack published in May 2026 that demonstrates how CVE-2025-48804 can let someone with physical access boot a manipulated Windows recovery environment and reach decrypted BitLocker-protected Windows drives in minutes on vulnerable configurations. The unsettling...