‘GreatXML’ Zero-Day Exploit Bypasses BitLocker

Security researcher Nightmare Eclipse has released a new Windows BitLocker bypass exploit called GreatXML that exploits a vulnerability in Microsoft Defender's offline scan functionality. The exploit allows attackers to bypass BitLocker encryption and gain SYSTEM-level access through Recovery Mode on any Windows machine where Defender's offline scan was initiated at least once. This is the latest in a series of zero-day exploits released by the researcher, who has expressed frustration with Microsoft's vulnerability disclosure program, forcing the company to scramble patches for multiple publicly disclosed security flaws.