<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-27T13:15:22.593037+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3e7f5d50-9bd9-485f-a0c4-38ae0b377738/export</id>
    <title>3e7f5d50-9bd9-485f-a0c4-38ae0b377738</title>
    <updated>2026-05-27T13:15:22.601031+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3e7f5d50-9bd9-485f-a0c4-38ae0b377738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmevr3uy3z25", "content": "Microsoft assigned CVE-2026-45585 on May 19 to a publicly disclosed BitLocker bypass called YellowKey. An attacker with physical access can boot a Windows 11 or Server 2025 device into the recovery environment, hold CTRL, and drop into an unrestricted shell that reads the encrypted drive. ...", "creation_timestamp": "2026-05-21T17:06:18.179806Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3e7f5d50-9bd9-485f-a0c4-38ae0b377738/export"/>
    <published>2026-05-21T17:06:18.179806+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0612b951-2512-4bd6-adec-850c6ecc63a2/export</id>
    <title>0612b951-2512-4bd6-adec-850c6ecc63a2</title>
    <updated>2026-05-27T13:15:22.600948+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0612b951-2512-4bd6-adec-850c6ecc63a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://t.me/xakep_ru/19411", "content": "\u0412 Microsoft \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0442 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 YellowKey \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 BitLocker\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b YellowKey \u2014 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 BitLocker, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 Windows-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-45585 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 6,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\nhttps://xakep.ru/2026/05/21/yellowkey-migration/", "creation_timestamp": "2026-05-21T17:39:45.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0612b951-2512-4bd6-adec-850c6ecc63a2/export"/>
    <published>2026-05-21T17:39:45+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8271cb26-c0e0-4ed9-ac58-33ca3b4b021f/export</id>
    <title>8271cb26-c0e0-4ed9-ac58-33ca3b4b021f</title>
    <updated>2026-05-27T13:15:22.600878+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8271cb26-c0e0-4ed9-ac58-33ca3b4b021f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "Telegram/EQ-OtrMk-MWFYtaQdS6-MjZwABKlvl-CaVDrJmD_M-e-p2s", "content": "", "creation_timestamp": "2026-05-22T03:00:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8271cb26-c0e0-4ed9-ac58-33ca3b4b021f/export"/>
    <published>2026-05-22T03:00:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/30e883c0-daf3-4106-a3dd-35efb5773cf9/export</id>
    <title>30e883c0-daf3-4106-a3dd-35efb5773cf9</title>
    <updated>2026-05-27T13:15:22.600802+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "30e883c0-daf3-4106-a3dd-35efb5773cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mmhlcgr2r42v", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20182, CVE-2026-42897, CVE-2026-45585, CVE-2026-42945, CVE-2026-9082\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-05-22T18:37:06.740400Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/30e883c0-daf3-4106-a3dd-35efb5773cf9/export"/>
    <published>2026-05-22T18:37:06.740400+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a552ab53-ce78-48a0-b2ca-236f2915dbd8/export</id>
    <title>a552ab53-ce78-48a0-b2ca-236f2915dbd8</title>
    <updated>2026-05-27T13:15:22.600720+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a552ab53-ce78-48a0-b2ca-236f2915dbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/85592", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a yellowkey-bitlocker\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Mclisterjoeh2o\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 23  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-23 18:00:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nyellowkey  bitlocker github vulnerability  bypass  cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-23T18:00:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a552ab53-ce78-48a0-b2ca-236f2915dbd8/export"/>
    <published>2026-05-23T18:00:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/01585a00-fc04-44de-8169-a4d3df019fb5/export</id>
    <title>01585a00-fc04-44de-8169-a4d3df019fb5</title>
    <updated>2026-05-27T13:15:22.600635+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "01585a00-fc04-44de-8169-a4d3df019fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "Telegram/ZaHXjBqHV5p0kjhml26f_2eMLQEVC_NJ4MXuG-5T_OiTVdE", "content": "", "creation_timestamp": "2026-05-23T21:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/01585a00-fc04-44de-8169-a4d3df019fb5/export"/>
    <published>2026-05-23T21:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3dbc968a-56d6-4ea2-b6e6-c2d15c44dfce/export</id>
    <title>3dbc968a-56d6-4ea2-b6e6-c2d15c44dfce</title>
    <updated>2026-05-27T13:15:22.600559+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3dbc968a-56d6-4ea2-b6e6-c2d15c44dfce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mmkm4wm4ll2f", "content": "Microsoft released a mitigation for the YellowKey (CVE-2026-45585) BitLocker bypass flaw, rated 6.8 CVSS. It's a security feature bypass vulnerability. #CyberSecurity", "creation_timestamp": "2026-05-23T23:29:55.218100Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3dbc968a-56d6-4ea2-b6e6-c2d15c44dfce/export"/>
    <published>2026-05-23T23:29:55.218100+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4914d69b-9225-4ffd-a133-7d2613763bc8/export</id>
    <title>4914d69b-9225-4ffd-a133-7d2613763bc8</title>
    <updated>2026-05-27T13:15:22.600477+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4914d69b-9225-4ffd-a133-7d2613763bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "Telegram/tLTaf5zN9aUn_D8KOi_rgxptZENw0EocHmy4bQpa2VASaD8", "content": "", "creation_timestamp": "2026-05-24T09:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4914d69b-9225-4ffd-a133-7d2613763bc8/export"/>
    <published>2026-05-24T09:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/56854438-f15b-4e18-bbe8-22e7d1789b8e/export</id>
    <title>56854438-f15b-4e18-bbe8-22e7d1789b8e</title>
    <updated>2026-05-27T13:15:22.600378+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "56854438-f15b-4e18-bbe8-22e7d1789b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmmzoauhvs2g", "content": "Microsoft\u3001\u30bc\u30ed\u30c7\u30a4 \u8106\u5f31\u6027\u306eRedSun(CVE-2026-41091)\u3068UnDefend(CVE-2026-45498)\u306e\u7dca\u6025\u30d1\u30c3\u30c1\u3092\u516c\u958b\u30fbYellowKey(CVE-2026-45585)\u306f\u300c\u7de9\u548c\u7b56\u306e\u307f\u300d\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-05-24T22:37:38.959153Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/56854438-f15b-4e18-bbe8-22e7d1789b8e/export"/>
    <published>2026-05-24T22:37:38.959153+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c29cfede-67fb-4526-8b27-04adb7a2af3a/export</id>
    <title>c29cfede-67fb-4526-8b27-04adb7a2af3a</title>
    <updated>2026-05-27T13:15:22.599167+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c29cfede-67fb-4526-8b27-04adb7a2af3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/kaijulogic.bsky.social/post/3mmpiurgqxk25", "content": "I was surprised I didn't see more discussion about the YellowKey BitLocker vulnerability (CVE-2026-45585) so I decided to make a short blog post compiling the information I could find about it. Check it out if you are interested in learning more!\ntinyurl.com/mt4k5we4", "creation_timestamp": "2026-05-25T22:15:01.726482Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c29cfede-67fb-4526-8b27-04adb7a2af3a/export"/>
    <published>2026-05-25T22:15:01.726482+00:00</published>
  </entry>
</feed>
