2026-07-15 14:51 UTC
Patch Tuesday Mystery! A BitLocker bypass dubbed CVE-2026-50661 was patched in the July 2026 Windows update…
So far, media coverage is just repeating Microsoft’s basic report, which admits this was a zero-day (known and disclosed already) but not exactly which already-disclosed bug it relates to.
CrowdStrike, amongst others, has reasonably wondered whether, although “not confirmed at this time, this CVE may be the patch for [Nightmare Eclipse’s] GreatXML.”
I wrote up this exploit in detail (including how well it worked for him in real-world testing) when it was first disclosed last month.
https://solcyber.com/bitlocker-defender-zero-days-and-bragging-rights-more-ms-nightmares/
Replies (0)
No replies.