Hardening Library

Security research, tutorials, and product updates from the Retrievy team

Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.

Filters: #zero-day × Clear all

5 articles match

of 34 total

YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands

Threat Intel

May 21, 2026 3 min read

YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands

Microsoft has issued a mitigation for CVE-2026-45585, a publicly disclosed BitLocker bypass zero-day dubbed YellowKey, while a full patch is still pending. CVSS 6.8 understates the risk for encrypted-disk-dependent security models.

Retrievy Team

Read Now

MiniPlasma Zero-Day PoC Drops: Unpatched Windows SYSTEM Escalation

Threat Intel

May 18, 2026 3 min read

MiniPlasma Zero-Day PoC Drops: Unpatched Windows SYSTEM Escalation

A researcher-released PoC exploit dubbed 'MiniPlasma' achieves SYSTEM-level privilege escalation on fully patched Windows systems, with no vendor fix available yet.

Retrievy Team

Read Now

Two New Windows Zero-Days Target BitLocker and CTFMON Privilege Escalation

Threat Intel

May 14, 2026 4 min read

Two New Windows Zero-Days Target BitLocker and CTFMON Privilege Escalation

A researcher known as Chaotic Eclipse has dropped two unpatched Windows zero-days — dubbed YellowKey and GreenPlasma — hitting BitLocker's encryption guarantees and CTFMON's privilege boundary.

Retrievy Team

Read Now

AI-Generated Zero-Day Exploit Bypasses 2FA at Scale in the Wild

Threat Intel

May 13, 2026 4 min read

AI-Generated Zero-Day Exploit Bypasses 2FA at Scale in the Wild

Google has identified a threat actor using a zero-day exploit likely built with AI assistance — the first confirmed in-the-wild use of AI for vulnerability discovery and exploit generation, targeting 2FA mechanisms.

Retrievy Team

Read Now

CISA's Four-Day Ivanti EPMM Deadline Should Reset Your Patch Clock Too

Threat Intel

May 09, 2026 3 min read

CISA's Four-Day Ivanti EPMM Deadline Should Reset Your Patch Clock Too

CISA ordered federal agencies to patch an actively exploited Ivanti EPMM zero-day within four days. If you run EPMM in any environment, that timeline should be yours as well.

Retrievy Team

Read Now

Security research, tutorials, and product updates from the Retrievy team

YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands

MiniPlasma Zero-Day PoC Drops: Unpatched Windows SYSTEM Escalation

Two New Windows Zero-Days Target BitLocker and CTFMON Privilege Escalation

AI-Generated Zero-Day Exploit Bypasses 2FA at Scale in the Wild

CISA's Four-Day Ivanti EPMM Deadline Should Reset Your Patch Clock Too

Cookie Preferences