[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fArQEPWRJMBdscb37E63vxmpZkika5bXahFQeN9aUL1c":3},{"article":4,"iocs":44,"watch_terms":49,"solutions":50,"lesson":128},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"94590a6d-8da0-4077-aaf1-1a035378a39a","🚨 Security researcher, Nightmare Eclipse, has released another BitLocker bypass vulnerability ca...","security-researcher-nightmare-eclipse-has-released-another-bitlocker-bypass-vuln-e0fda9","🚨 Security researcher, Nightmare Eclipse, has released another BitLocker bypass vulnerability called GreatXML.\n\nGitHub: https:\u002F\u002Ft.co\u002FtQ7zXnERX5 https:\u002F\u002Ft.co\u002F80726Ue9qE","Security researcher Nightmare Eclipse has disclosed a new BitLocker bypass vulnerability named GreatXML. This vulnerability allows attackers to potentially circumvent BitLocker's encryption, a critical security feature for Windows. The researcher has shared details and potentially proof-of-concept code via GitHub.","Researcher Nightmare Eclipse releases GreatXML, a new BitLocker bypass vulnerability.","https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2065085165966074181","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHKin3ggXIAA7V6D.jpg","2026-06-11T14:54:05+00:00","2026-06-11T15:00:09.602945+00:00",8,[17,20,23],{"name":18,"type":19},"Nightmare Eclipse","threat_actor",{"name":21,"type":22},"BitLocker","product",{"name":24,"type":25},"Windows","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,39],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"0493c7e9-989a-4692-b4e6-136f5ec09675","Cryptography","cryptography",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[45],{"type":46,"value":47,"context":48},"url","https:\u002F\u002Fgithub.com\u002FNightmare-Eclipse\u002FGreatXML","GitHub repository for GreatXML BitLocker bypass",[21],{"controls":51,"vendors":124},[52,81,95],{"slug":53,"name":54,"problem":55,"products":56},"patch-management","Automated patch management","Known holes get closed in days, not months.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":82,"name":83,"problem":84,"products":85},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[86,87],{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":96,"name":97,"problem":98,"products":99},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[100,108,116],{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",[125],{"slug":88,"name":89,"logo_path":90,"roles":126},[127],"affected",{"slug":129,"title":130,"body":131,"framework_refs":132,"framework_notes":139},"bitlocker-bypass-vulnerability-exposes-encrypted-data-risk","BitLocker Bypass Vulnerability Exposes Encrypted Data Risk","The GreatXML vulnerability demonstrates how encryption bypass flaws can completely undermine data protection measures, rendering BitLocker's disk encryption ineffective. When encryption technologies have vulnerabilities, attackers can access sensitive data that organizations believed was protected, creating a false sense of security. This highlights the critical importance of timely patching for security components and having layered defense strategies that don't rely solely on encryption.",[133,134,135,136,137,138],"CIS Control 3","CIS Control 7","NIST SP 800-111","NIST SC-28","ISO 27001 A.10.1.1","GDPR Article 32",{}]