Microsoft Drops Legal Threat Over Windows 11 BitLocker Zero-Day as Backlash Hits CVD Stance
Updated
Updated · Yahoo · Jun 2
Microsoft Drops Legal Threat Over Windows 11 BitLocker Zero-Day as Backlash Hits CVD Stance
3 articles · Updated · Yahoo · Jun 2
Microsoft said June 1 it has no intention of pursuing action against people conducting or publishing security research, reversing an earlier threat tied to the YellowKey disclosure.
The retreat followed backlash after the company warned that publishing unpatched bugs and proof-of-concept code could endanger customers and invite law-enforcement action.
YellowKey, tracked as CVE-2026-45585, let a researcher known as Chaotic Eclipse bypass BitLocker protection on Windows 11 with a simple USB key; Microsoft said the flaw had not been shared in advance under its disclosure policy.
Security researchers said the legal threat risked undermining Microsoft's research-friendly image, raising broader questions about whether the clash could chill future vulnerability reporting.