> TritonInfoSec News
Home / Jun 12, 2026 / Story
0
#7 The Hacker News general June 11, 2026 at 17:43 UTC

New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

By [email protected] (The Hacker News)

AI Summary

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse/MSNightmare) released GreatXML, a Windows BitLocker bypass that exploits malicious XML files in the recovery partition via Microsoft Defender's offline scan feature to spawn a SYSTEM shell during Recovery Mode reboot — reportedly discovered accidentally in 4 hours. This follows the researcher's separate release of RoguePlanet, a Windows Defender local privilege escalation exploit abusing a race condition, indicating an ongoing campaign of uncoordinated vulnerability disclosure against Microsoft products.

Read full article → https://thehackernews.com/2026/06/new-greatxml-exp…

Relevance score: 80.0/100

# More from June 12

  1. 1
    ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities The Hacker News
  2. 2
    CISA tells govt agencies to patch critical exploited flaws in 3 days BleepingComputer
  3. 3
    Max severity Ivanti Sentry vulnerability now exploited in attacks BleepingComputer
  4. 4
    Microsoft Patches Exploited Exchange Server Vulnerability SecurityWeek
  5. 5
    Russian national charged in connection with Void Blizzard espionage campaign CyberScoop
  6. 6
    GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks The Hacker News
  7. 8
    ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances The Hacker News
  8. 9
    China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance The Hacker News
  9. 10
    Coupang hit with record $409 million data breach fine in Korea BleepingComputer