Zero-Day Exploit Against Windows BitLocker
It’s nasty, but it requires physical access to the computer:
The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse. It reliably bypasses default Windows 11 deployments of BitLocker, the full-volume encryption protection Microsoft provides to make disk contents off-limits to anyone without the decryption key, which is stored in a secured piece of hardware known as a trusted platform module (TPM). BitLocker is a mandatory protection for many organizations, including those that contract with governments.
Slashdot thread. And here’s Nightmare-Eclipse’s GitHub account.
Subscribe to comments on this entry
mw • May 18, 2026 7:32 AM
If someone thinks his data is safe even when not uploading the bitlocker key to Microsoft, it isn’t. Do NOT use bitlocker if your data should be private in all circumstances. IMHO use Veracrypt or, if running GNU/Linux, Zulucrypt.