BitUnlocker – Multiple 0-days to Bypass BitLocker and Extract All Protected Data

**Executive summary:** Researchers from Microsoft's STORM team disclosed four critical zero-day vulnerabilities in the Windows Recovery Environment that allow attackers with basic physical access to bypass BitLocker and extract decrypted data from Windows 10/11 and Windows Server devices; Microsoft released July 2025 patches and recommends enabling TPM+PIN and applying anti-rollback mitigations.