This worrying Microsoft BitLocker backdoor can grant full access to a locked drive — and all you need is a USB stick

A man typing on a Windows 11 laptop.

• Chaotic Eclipse leaks two new Windows flaws: YellowKey (BitLocker bypass) and GreenPlasma (privilege escalation)
• YellowKey abuses WinRE to bypass BitLocker; verified by Kevin Beaumont, though mitigations are debated
• GreenPlasma exploits CTFMON services for SYSTEM access; follows earlier leaks RedSun, UnDefend, and BlueHammer (later patched as CVE‑2026‑33825)

Chaotic Eclipse, the security researcher who recently leaked three unpatched Windows vulnerabilities because they weren’t happy with how Microsoft handles bug reports, has now leaked two more flaws, together with proof-of-concepts (PoC) showing how they could be exploited.