Hosted on MSN

A new Windows 11 BitLocker bypass only needs a USB stick, and the researcher thinks it's a backdoor

BitLocker is the encryption layer that most Windows 11 users never think about. It runs quietly in the background and it's tied to the TPM, with the entire point of it being that if someone walks off ...
JD Supra

YellowKey Zero-Day and the BitLocker Bypass: Compliance and Incident Response Implications

A publicly disclosed and widely unpatched zero-day vulnerability, named YellowKey, permits anyone with physical access to a device running Windows 11 or Windows Server 2022/2025 to bypass BitLocker ...
Hosted on MSN

Microsoft just rushed out a fix for 'YellowKey' — a Windows flaw that lets attackers pop open BitLocker-encrypted drives and read what's inside

Microsoft has confirmed a vulnerability in Windows Recovery Environment that can let an attacker with physical access bypass BitLocker encryption and read the contents of a protected drive. The flaw, ...
Ars Technica

Crucial and Samsung SSD encryption easily bypassed, MBAM/BitLocker on Windows 10

I'm not sure if anyone saw the news, but apparently Crucial's and Samsung's self-encrypting drives have very weak keys or key verification and is easily bypassed to get access to the encrypted data.
BleepingComputer

Microsoft shares script to update Windows 10 WinRE with BitLocker fixes

Microsoft has released a PowerShell script to automate updating the Windows Recovery Environment (WinRE) partition in order to fix CVE-2024-20666, a vulnerability that allowed for BitLocker encryption ...