Zero-Day Exploit Against Windows BitLocker

Multiple high-impact security stories: a published zero-day named “YellowKey” reliably bypasses default Windows 11 BitLocker (TPM-backed) protections but requires physical access; a separate, widespread Linux local privilege escalation dubbed “copy.fail” (CVE-2026-31431) abuses the kernel crypto API (AF_ALG) + splice() to write into page cache and has a working PoC affecting many distributions; AI-security developments show models (Anthropic Mythos, OpenAI GPT-5.5) can effectively find vulnerabilities; additional items include LLM text-in-text steganography and simple bypasses of on-camera age