Similar to This
Previous
Nightmare-Eclipse Drops Another BitLocker Bypass After YellowKey Patch: Nightmare-Eclipse, the current bane of Microsoft's existence, strike again with new ...
hothardware.com/news/nightmare-eclipse-drops-another-bitlocker-bypass-after-yellowkey-patch
Microsoft's bug-hunting nemesis extends vendetta with more zero-day attacks — Nightmare Eclipse publishes RoguePlanet and GreatXML local privilege ...
tomshardware.com/tech-industry/cyber-security/microsofts-bug-hunting-nemesis-extends-vendetta-with-more-zero-day-attacks-nightmare-eclipse-publishes-rogueplanet-and-greatxml-local-privilege-escalation-exploits
dlvr.it Jun 03
Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures
theregister.com/security/2026/06/03/another-bug-hunter-leaks-microsoft-exploits-in-defiance-of-companys-handling-of-vulnerability-disclosures/5250590
Microsoft Faces Backlash Over Criminal Probe Threat Against Security Researcher: In response to a threat of legal action against Nightmare-Eclipse ...
hothardware.com/news/microsoft-faces-backlash-over-criminal-probe-threat-against-security-researcher
Microsoft is threatening legal action for disclosing exploits: Microsoft is threatening legal action against a security researcher Nightmare Eclipse for publicly ...
theverge.com/tech/940416/microsoft-nightmare-eclipse-zero-day-vulnerability
Paid articlePaywall
doublepulsar.com May 29
Microsoft’s stance on zero day exploits is a dumpster fire of their own making: Microsoft’s stance on zero day exploits is a dumpster fire of their own making ...
doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4
WindowsCentral May 28
"I have proof for every single word": This security researcher's GitHub and Microsoft accounts were deleted after claiming a Windows 11 exploit ...
windowscentral.com/microsoft/security-researcher-github-microsoft-accounts-deleted-windows-11-exploit-bitlocker
Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is ...
tomshardware.com/tech-industry/cyber-security/microsofts-github-bans-security-researcher-who-posted-zero-day-windows-exploits-because-company-ruined-their-life-expert-claims-action-is-vindictive-and-promises-further-retaliation
Github account suspended: Dispute between Microsoft and Chaotic Eclipse escalates - | Golem.de
golem.de/news/github-konto-gesperrt-streit-zwischen-microsoft-und-chaotic-eclipse-eskaliert-2605-209024.html
Microsoft Mitigates Dangerous YellowKey Tool That Breaks BitLocker: Microsoft has a potential workaround for the recent YellowKey BitLocker exploit ...
hothardware.com/news/microsoft-mitigates-dangerous-yellowkey-tool-that-breaks-bitlocker
A new Windows 11 BitLocker bypass only needs a USB stick, and the researcher thinks it's a backdoor
xda-developers.com/new-windows-11-bitlocker-bypass-needs-usb-stick-researcher-backdoor/
Key FactsUSB-Based Backdoor Breaches BitLocker Encryption
May 14, 2026 · Reading time: ~45 sec.
Summary created with AI assistance · Source: tomshardware.com
Summary created with AI assistance · Source: tomshardware.com
- The YellowKey zero-day exploit allows complete access to BitLocker-encrypted drives by copying files to a USB stick and rebooting into recovery mode.
- The exploit’s files vanish from the USB after use, suggesting a concealed backdoor that raises serious security and political concerns.
- YellowKey affects Windows Server 2022 and 2025 but not Windows 10, and it can bypass TPM-and-PIN configurations.
- Another exploit, GreenPlasma, enables local privilege escalation to system-level access, posing significant risks especially to server systems.
could have made some insane cash selling this, but no amount of money will stand between me and my determination against Microsoft.— Chaotic Eclipse (Nightmare-Eclipse) – regarding the YellowKey zero-day exploit and their stance against Microsoft.
Rejected By Microsoft, 3 Defender Zero-Days Are Now Actively Exploited: Hell hath no fury like a cyber security researcher scorned.
hothardware.com/news/angry-researcher-drops-a-windows-defender-zero-day-after-microsoft-rejects-bug-report
dlvr.it Mar 30
GitHub backs down, kills Copilot pull-request ads after backlash: : Letting Copilot alter others' PRs was the wrong judgment call, says product manager
theregister.com/2026/03/30/github_copilot_ads_pull_requests/
Next