Microsoft Warns: Windows Zero-Day ‘YellowKey’ Can Bypass BitLocker

Multiple high-risk incidents and active exploit activity affecting Windows and cloud environments were reported. Microsoft disclosed a zero-day named “YellowKey” that can bypass BitLocker (temporary mitigation available) and related PoCs target BitLocker protections and SYSTEM privilege escalation; Microsoft published workarounds and a Patch Tuesday addressing 120 flaws. Microsoft also disrupted “Fox Tempest,” a malware-signing service abusing Azure certificates to sign malicious payloads. Other notable items: a CISA contractor exposed AWS GovCloud credentials on a public GitHub repo, a macOS