A publicly disclosed and widely unpatched zero-day vulnerability, named YellowKey, permits anyone with physical access to a device running Windows 11 or Windows Server 2022/2025 to bypass BitLocker ...

Back in May, we learned that security researchers found a vulnerability in Windows’ BitLocker encryption system. This vulnerability enabled bad actors to completely bypass the encryption if they got ...

A new BitLocker bypass vulnerability, CVE-2026-50507, lets anyone holding your stolen Windows laptop read its encrypted files without a password. Microsoft scored it 6.8 and patched it in June 2026, ...

Microsoft's own security researchers uncovered a set of of vulnerabilities in the Windows Recovery Environment (WinRE), one of which could have allowed attackers with direct physical device access to ...