Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor

Security researcher Chaotic Eclipse disclosed two proof-of-concept Windows exploits: YellowKey and GreenPlasma.

YellowKey is said to bypass BitLocker-protected drives from a USB-based process in Windows Recovery Environment.

GreenPlasma is described as a path to SYSTEM-level access via Windows process and memory-object manipulation.

Microsoft had not publicly responded at the time of disclosure.

If real and exploitable, the flaws could put encrypted data and entire Windows systems at risk, including servers.