The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode.

The post ‘GreatXML’ Zero-Day Exploit Bypasses BitLocker appeared first on SecurityWeek.

ON SECURITY By Susan Bradley Normally, I like to give actionable information. This article won’t do that. Sure, I’ll give you a few tips here and there, but for the vast majority of this week’s column, I’ll be pointing out instances of vendor arrogance. I’m going to begin with Microsoft (of course, and deservedly so), […]

ISSUE 23.22.1 • 2026-06-04 By Susan Bradley Microsoft is starting to roll out its much-promised, dribbled fixes. Included in the upcoming June updates — and already included in the preview updates released on May 26, 2026 — KB5089573 includes the Secure Boot fixes and the beginning of many changes about which you’ve complained. Nonetheless, it’s […]

The exploitation is mitigated by preventing the FsTx Auto Recovery Utility from starting when the WinRE image launches.

The post Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass appeared first on SecurityWeek.

YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System.

The post Researcher Drops YellowKey, GreenPlasma Windows Zero-Days appeared first on SecurityWeek.

Editor’s Note: We’re excited to publish our first guest post!  If you’d like to guest post on our blog DM us on Twitter, or use our contact form to contact us […]

The post Bitlocker Ransomware: Using BitLocker for Nefarious Reasons appeared first on Black Hills Information Security, Inc..