Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days

Microsoft released patches in the June 2026 Patch Tuesday addressing three zero-day flaws disclosed by a researcher known as "Nightmare Eclipse": GreenPlasma and MiniPlasma (local privilege escalations allowing SYSTEM shells) and YellowKey (a WinRE backdoor enabling BitLocker bypass with physical access). The report also notes other leaked proof-of-concept zero-days (BlueHammer, RedSun, UnDefend, RoguePlanet), mentions active exploitation for some of those flaws, and highlights Microsoft's mitigation guidance and response to the public disclosures.