PulseAugur
EN
LIVE 02:45:53

Zero-day exploits unlock BitLocker drives, escalate Windows privileges

A security researcher known as Chaotic Eclipse has disclosed two new zero-day exploits targeting Microsoft Windows. The first, dubbed "YellowKey," allows unauthorized access to BitLocker-encrypted drives by simply copying specific files to a USB stick and rebooting into the Windows Recovery Environment. This exploit bypasses the need for encryption keys and reportedly works even with TPM and PIN protections, raising significant security concerns for millions of users worldwide. The second exploit, "GreenPlasma," allegedly provides local privilege escalation to gain system-level access by manipulating system processes. AI

IMPACT Security vulnerabilities in BitLocker and Windows could impact the integrity of data used in AI systems and operations.

RANK_REASON Disclosure of security vulnerabilities in widely used software.

Read on Tom's Hardware →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

Zero-day exploits unlock BitLocker drives, escalate Windows privileges

COVERAGE [2]

  1. Tom's Hardware TIER_1 English(EN) · Bruno Ferreira ·

    Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor

    Microsoft Bitlocker-protected drives can be opened with just some files on a stick

  2. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor Micros

    Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor Microsoft Bitlocker-protected drives can be opened with just some files on a stick https://www. tomshardware.com/tech-industry…