Two Windows BitLocker flaws let physical attackers bypass encryption
Microsoft says CVE-2026-119832 was not publicly disclosed or known exploited when the November 10 advisories shipped.
Stories per day · 30 days
5 stories, newest first · one card per story
Stories tagged #encryption-bypass
OpenAI reveals ‘novel’ encryption bypass used in distillation attack
OpenAI disrupted a Moonshot AI-linked distillation campaign that tricked its models into decrypting protected reasoning data using up to 15,000 accounts.
3
CVE-2026-34486: Apache Software Foundation Apache Tomcat
CISA added CVE-2026-34486, an actively exploited Apache Tomcat EncryptInterceptor bypass enabling unauthenticated deserialization RCE, to its KEV catalog.
5
CVE-2026-34486: Apache Tomcat EncryptInterceptor Fail-Open Bypass
Technical analysis shows CVE-2026-34486 is a one-line fail-open regression in Tomcat Tribes enabling unauthenticated RCE via Java deserialization.
10
CVE-2026-34486: Apache Tomcat Auth Bypass Vulnerability
SentinelOne details CVE-2026-34486, an Apache Tomcat EncryptInterceptor bypass exposing unencrypted cluster communications, with patches and workarounds available.
4