Zero-Day Exploit Against Windows BitLocker

Source: Schneier on Security

Exploit Overview

The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare‑Eclipse. It reliably bypasses default Windows 11 deployments of BitLocker, the full‑volume encryption protection Microsoft provides to make disk contents off‑limits to anyone without the decryption key. The key is stored in a secured piece of hardware known as a Trusted Platform Module (TPM). BitLocker is a mandatory protection for many organizations, including those that contract with governments.

References

• Slashdot thread
• Nightmare‑Eclipse’s GitHub account