Security researcher publishes YellowKey zero-day exploit that bypasses Microsoft BitLocker encryption via USB stick

Summary

Security researcher Chaotic Eclipse (Nightmare-Eclipse) has published two new zero-day exploits targeting Microsoft systems after their previous vulnerability disclosures were allegedly dismissed by Microsoft's security team. The first exploit, YellowKey, allows attackers to bypass BitLocker encryption and open protected drives using only files on a USB stick, effectively demonstrating what appears to be a backdoor. The second exploit, GreenPlasma, is a local privilege escalation vulnerability. This follows the researcher's previous zero-day exploits BlueHammer and RedSun, which targeted Windows Defender to gain system administrator privileges. The researcher's actions appear motivated by frustration after Microsoft allegedly ignored their responsible disclosure reports.