A recently disclosed zero-day vulnerability, referred to as “YellowKey”, affects Microsoft Windows systems and allows attackers to bypass BitLocker encryption. BitLocker is designed to protect sensitive data by encrypting entire drives. However, this vulnerability exploits a weakness in the Windows Recovery Environment, it is a built-in feature used for troubleshooting and repairing systems.
The researcher who disclosed this vulnerability also released a PoC (proof of concept) exploit code, making it easier for others to replicate the attack.