Microsoft Warns: Windows Zero-Day ‘YellowKey’ Can Bypass BitLocker

Microsoft acknowledged a Windows zero-day named "YellowKey" that allows an attacker with physical access to bypass BitLocker by leveraging WinRE and a crafted FsTx USB payload; a public PoC exists, Microsoft published a temporary mitigation script (removing autofstx.exe) and recommends mitigations such as TPM+PIN while a permanent patch is awaited.