Zero-day exploit completely defeats default Windows 11 BitLocker protections
Summary
A zero-day exploit, YellowKey, bypasses default Windows 11 BitLocker protections, allowing access to encrypted drives with physical access. The method involves a custom FsTx folder and NTFS transactional components, enabling a CMD prompt and bypassing the usual BitLocker recovery flow. Microsoft is investigating, and experts advise enabling additional mitigations such as BIOS passwords and TPM PINs for stronger protection.