<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-09T08:53:51.789643+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3dbc968a-56d6-4ea2-b6e6-c2d15c44dfce/export</id>
    <title>3dbc968a-56d6-4ea2-b6e6-c2d15c44dfce</title>
    <updated>2026-06-09T08:53:51.805313+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3dbc968a-56d6-4ea2-b6e6-c2d15c44dfce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mmkm4wm4ll2f", "content": "Microsoft released a mitigation for the YellowKey (CVE-2026-45585) BitLocker bypass flaw, rated 6.8 CVSS. It's a security feature bypass vulnerability. #CyberSecurity", "creation_timestamp": "2026-05-23T23:29:55.218100Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3dbc968a-56d6-4ea2-b6e6-c2d15c44dfce/export"/>
    <published>2026-05-23T23:29:55.218100+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4914d69b-9225-4ffd-a133-7d2613763bc8/export</id>
    <title>4914d69b-9225-4ffd-a133-7d2613763bc8</title>
    <updated>2026-06-09T08:53:51.805237+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4914d69b-9225-4ffd-a133-7d2613763bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "Telegram/tLTaf5zN9aUn_D8KOi_rgxptZENw0EocHmy4bQpa2VASaD8", "content": "", "creation_timestamp": "2026-05-24T09:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4914d69b-9225-4ffd-a133-7d2613763bc8/export"/>
    <published>2026-05-24T09:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/56854438-f15b-4e18-bbe8-22e7d1789b8e/export</id>
    <title>56854438-f15b-4e18-bbe8-22e7d1789b8e</title>
    <updated>2026-06-09T08:53:51.805159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "56854438-f15b-4e18-bbe8-22e7d1789b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmmzoauhvs2g", "content": "Microsoft\u3001\u30bc\u30ed\u30c7\u30a4 \u8106\u5f31\u6027\u306eRedSun(CVE-2026-41091)\u3068UnDefend(CVE-2026-45498)\u306e\u7dca\u6025\u30d1\u30c3\u30c1\u3092\u516c\u958b\u30fbYellowKey(CVE-2026-45585)\u306f\u300c\u7de9\u548c\u7b56\u306e\u307f\u300d\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-05-24T22:37:38.959153Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/56854438-f15b-4e18-bbe8-22e7d1789b8e/export"/>
    <published>2026-05-24T22:37:38.959153+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c29cfede-67fb-4526-8b27-04adb7a2af3a/export</id>
    <title>c29cfede-67fb-4526-8b27-04adb7a2af3a</title>
    <updated>2026-06-09T08:53:51.805077+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c29cfede-67fb-4526-8b27-04adb7a2af3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/kaijulogic.bsky.social/post/3mmpiurgqxk25", "content": "I was surprised I didn't see more discussion about the YellowKey BitLocker vulnerability (CVE-2026-45585) so I decided to make a short blog post compiling the information I could find about it. Check it out if you are interested in learning more!\ntinyurl.com/mt4k5we4", "creation_timestamp": "2026-05-25T22:15:01.726482Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c29cfede-67fb-4526-8b27-04adb7a2af3a/export"/>
    <published>2026-05-25T22:15:01.726482+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/788b1405-ef5f-42a2-a28a-ea28550652d5/export</id>
    <title>788b1405-ef5f-42a2-a28a-ea28550652d5</title>
    <updated>2026-06-09T08:53:51.804958+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "788b1405-ef5f-42a2-a28a-ea28550652d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://t.me/kasperskyb2b/2196", "content": "\ud83d\ude08 \u041a\u043e\u0448\u043c\u0430\u0440 \u043f\u0435\u0440\u0435\u0434 \u0437\u0430\u0442\u043c\u0435\u043d\u0438\u0435\u043c \u0432 \u043e\u0444\u0438\u0441\u0435 Microsoft\n\n\u0421 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u043c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c \u0437\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0432 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f Nightmare Eclipse \u0438 Microsoft, \u0442\u043e\u0447\u043d\u0435\u0435 \u0438\u0445 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, MSRC. \u041f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u043e \u043d\u0451\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u0434\u043b\u044f \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows \u0438 Defender, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 (\u043f\u043e \u0435\u0433\u043e \u0441\u043b\u043e\u0432\u0430\u043c), \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u0432\u0438\u0434\u0435\u043e\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.  \n\n\u041d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0443\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u043b\u043e \u0432 \u043c\u0430\u0435, \u043a\u043e\u0433\u0434\u0430 \u0430\u043a\u043a\u0443\u0440\u0430\u0442 \u043f\u043e\u0441\u043b\u0435 \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Yellowkey  (CVE-2026-45585), \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 BitLocker \u043d\u0430 Windows 11, Windows Server 2022 \u0438 2025. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0430 USB-\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0435\u0433\u043e \u043a \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0443 \u0441 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0438\u0441\u043a\u043e\u043c \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c\u0441\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (Windows Recovery Environment), \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f \u043d\u0430\u0436\u0430\u0442\u043e\u0439 CTRL. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u043a\u0430. \u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u044b, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u044b \u0438\u0441\u0447\u0435\u0437\u0430\u044e\u0442 \u0441 \u0444\u043b\u044d\u0448\u043a\u0438, \u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u0442\u043e \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 apparent backdoor.\n\nMicrosoft \u0432 \u043e\u0442\u0432\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0438\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0432 WinRE \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0444\u0430\u0439\u043b autofstx.exe. \u0411\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u044b \u043d\u0430 \u043f\u043e\u0442\u043e\u043c.\n\u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c PIN-\u043a\u043e\u0434 (PIN+TPM), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Microsoft \u044d\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e PoC \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 WinRE, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u00ab\u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439\u00bb Windows \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0448\u0442\u0440\u0438\u0445\u043e\u0432 \u043d\u0430 \u0434\u0435\u0441\u0435\u0440\u0442. Microsoft \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0438\u043b\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 MSRC \u0438 \u043d\u0430 GitHub, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u0435\u0449\u0430\u043b \u0432\u0437\u044f\u0442\u044c \u043f\u0430\u0443\u0437\u0443 \u0432 \u0438\u044e\u043d\u0435 \u0438 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u0441 \u043d\u043e\u0432\u044b\u043c\u0438 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u043c\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f\u043c\u0438 14 \u0438\u044e\u043b\u044f.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Windows @\u041f2\u0422", "creation_timestamp": "2026-05-27T13:46:59.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/788b1405-ef5f-42a2-a28a-ea28550652d5/export"/>
    <published>2026-05-27T13:46:59+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31bf3fa2-1bf3-4075-bb38-bf04ae939e1b/export</id>
    <title>31bf3fa2-1bf3-4075-bb38-bf04ae939e1b</title>
    <updated>2026-06-09T08:53:51.804882+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31bf3fa2-1bf3-4075-bb38-bf04ae939e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "Telegram/UOEqxw8X8FBF5SdoLVIwOK-ODKVahezuJQZvJqlgU47R468", "content": "", "creation_timestamp": "2026-05-31T21:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31bf3fa2-1bf3-4075-bb38-bf04ae939e1b/export"/>
    <published>2026-05-31T21:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c5f5d844-8fa4-4be6-8f6a-ac0f3afd8adc/export</id>
    <title>c5f5d844-8fa4-4be6-8f6a-ac0f3afd8adc</title>
    <updated>2026-06-09T08:53:51.804805+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c5f5d844-8fa4-4be6-8f6a-ac0f3afd8adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "Telegram/w0GkJHs0a-iOGxRnRQVAJ6txbFx-4W5StLXj-Qhn1zDpC10", "content": "", "creation_timestamp": "2026-06-05T03:00:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c5f5d844-8fa4-4be6-8f6a-ac0f3afd8adc/export"/>
    <published>2026-06-05T03:00:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b8990a3-a736-4d7d-beb9-b42f5e8df9fe/export</id>
    <title>8b8990a3-a736-4d7d-beb9-b42f5e8df9fe</title>
    <updated>2026-06-09T08:53:51.804681+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b8990a3-a736-4d7d-beb9-b42f5e8df9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116699350092887103", "content": "Well, bitskrieg is public.\nWhile Microsoft \"fixed\" YellowKey as CVE-2026-45585 (and by \"fixed\", I mean they have provided manual steps that you can perform if you want to remove autofstx.exe from the WinRE registry BootExecute value), bitskrieg still works on such a system to achieve the same goal.  Though it requires a second computer, or a device that can communicate on a serial port.\n\nBoot into WinRe\nGo to a command prompt, ignoring the prompt to enter a bitlocker recovery key.  (Click Skip this drive)\nEnable the serial port in WinRe:bcdedit /set ems 1bcdedit /set emsport 1\nReboot back into WinRe\nFrom your other computer, connect to the serial port.\nType:cmdesctab-\nEnjoy your cmd.exe prompt (over serial) with a decrypted (assuming it's TPM-only) hard disk.", "creation_timestamp": "2026-06-05T20:19:30.022127Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b8990a3-a736-4d7d-beb9-b42f5e8df9fe/export"/>
    <published>2026-06-05T20:19:30.022127+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08661ddb-cb5f-4340-ad4d-7711240dbd78/export</id>
    <title>08661ddb-cb5f-4340-ad4d-7711240dbd78</title>
    <updated>2026-06-09T08:53:51.804516+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08661ddb-cb5f-4340-ad4d-7711240dbd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mnkxkgi6zfn2", "content": "Well, bitskrieg is public.\n\nWhile Microsoft \"fixed\" YellowKey as CVE-2026-45585 (and by \"fixed\", I mean they have provided **manual** steps that you can perform if you want to remove `autofstx.exe` from the WinRE registry `BootExecute` value), bitskrieg [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-06-05T20:19:34.908973Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08661ddb-cb5f-4340-ad4d-7711240dbd78/export"/>
    <published>2026-06-05T20:19:34.908973+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/af6697fc-ae8f-4fc0-ae14-dd5f469a922b/export</id>
    <title>af6697fc-ae8f-4fc0-ae14-dd5f469a922b</title>
    <updated>2026-06-09T08:53:51.802805+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "af6697fc-ae8f-4fc0-ae14-dd5f469a922b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/chandermanipandey.bsky.social/post/3mnqxkndgn22b", "content": "Hello Friends \ud83d\udc4b\n\nIf you're interested in understanding the basics of the Yellow Key | BitLocker Bypass Vulnerability (CVE-2026-45585) and learning how to manually check for it, this video is for you. \ud83d\udc40\n\n\ud83c\udfa5 Watch here: youtu.be/Q_t-okd901g\n\n#MicrosoftIntune #Intune", "creation_timestamp": "2026-06-08T05:35:38.028019Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/af6697fc-ae8f-4fc0-ae14-dd5f469a922b/export"/>
    <published>2026-06-08T05:35:38.028019+00:00</published>
  </entry>
</feed>
