Two Windows BitLocker flaws let physical attackers bypass encryption
Microsoft says CVE-2026-119832 was not publicly disclosed or known exploited when the November 10 advisories shipped.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #physical-access
Leaked chats show Russian extortion gang sending ‘agents’ into US law firms
Leaked chats show Silent Ransom Group recruiting U.S. operatives to physically infiltrate law firms and extort them.
3
ManageEngine RCE Flaw Enables SYSTEM Code Execution From Windows Login Screen
Critical RCE flaw in ManageEngine ADSelfService Plus allows unauthenticated SYSTEM-level code execution from the Windows logon screen, requiring physical access.
2
ZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation Vulnerability
ZDI discloses Linux Kernel usbnet driver race condition (CVE-2025-22050) enabling physically present attackers to escalate privileges without authentication.