A Hacker Found The BitLocker Backdoor

A security researcher known as Chaotic Eclipse publicly released multiple Windows exploits on GitHub after allegedly being denied a bug bounty by Microsoft. The exploits include Blue Hammer and Red Sun, which abuse Microsoft Defender for local privilege escalation, and Yellow Key, a zero-day that bypasses BitLocker encryption on Windows 11 and Windows Server 2022/2025 by abusing an undocumented debugging feature in the Windows Recovery Environment. The researcher speculates the debugging feature may be an intentional backdoor. Blue Hammer was patched in April 2026, Red Sun was silently patched, but Green Plasma and Yellow Key remain unpatched. The exploits require either existing system access or physical access to exploit, but are reportedly being used in the wild.