winre mitigation

The winre mitigation tag covers Microsoft's response to the YellowKey BitLocker bypass, tracked as CVE-2026-45585. This vulnerability exploits Windows Recovery Environment (WinRE) to bypass TPM-only BitLocker protection on stolen or unattended devices. Microsoft has issued manual mitigation guidance for affected Windows 11 and Windows Server 2025 systems rather than a full security update. Discussions highlight the brittleness of BitLocker's default convenience model when recovery components are overly trusted. Administrators are advised to implement the provided mitigations and consider TPM+PIN configurations to reduce risk. The tag focuses on practical steps for securing systems against this specific attack vector.