A security researcher known as Chaotic Eclipse has publicly disclosed two new zero-day exploits for Microsoft Windows, named YellowKey and GreenPlasma. These exploits target Windows BitLocker encryption and CTFMON arbitrary section creation, respectively, and have already been used in active attack campaigns. The researcher claims these disclosures are a response to dissatisfaction with Microsoft's handling of vulnerability reports, and has threatened further action. AI
Summary written by gemini-2.5-flash-lite from 2 sources. How we write summaries →
IMPACT Researchers are leveraging AI to expedite vulnerability research and exploit development, potentially increasing the speed and scale of future attacks.
RANK_REASON Disclosure of specific software vulnerabilities and exploits.