Endpoint Security ‘GreatXML’ Zero-Day Exploit Bypasses BitLocker The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode. Ionut ArghireJune 11, 2026
Endpoint Security Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass The exploitation is mitigated by preventing the FsTx Auto Recovery Utility from starting when the WinRE image launches. Ionut ArghireMay 20, 2026
Vulnerabilities Researcher Drops YellowKey, GreenPlasma Windows Zero-Days YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System. Ionut ArghireMay 14, 2026