The Point: BitLocker can be bypassed through the "Bitskrieg" attack with local access; exploit details are now public.
A new attack called "Bitskrieg" enables attackers with local access to circumvent Windows’ built-in BitLocker encryption and access encrypted volumes. The security researcher has now published the technical details.
The vulnerability affects BitLocker, Microsoft’s encryption solution for hard drives and external storage media. The attack requires that an attacker already possesses local access to a Windows system – for example through physical access or after network compromise.
With local access, attackers can use the “Bitskrieg” method to bypass encryption and access the contents of encrypted drives without knowing the password or recovery key. This poses a significant risk because BitLocker is widely used as a protective measure against unauthorized access to hard drives and data theft following hardware loss.
The security researcher has now publicly documented the technical details on exploitability. This is particularly relevant for CISOs operating systems with BitLocker-protected volumes: it makes clear that encryption alone does not provide sufficient protection as long as an attacker can gain physical or local access. The disclosure of the details underscores the importance of additional security layers such as strict access controls, endpoint protection, and monitoring of suspicious local activity.
Source: borncity.com · Published June 8, 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.6.5.