Conversation

Notices

1. Embed this notice
   djsumdog (djsumdog@djsumdog.com)'s status on Thursday, 21-May-2026 00:12:30 JST djsumdog

   in reply to

   • :rainbowCrow:
   It's not a CVE. It's an obvious backdoor that didn't exist in Win10. It was planned and it was intentional.
   • Embed this notice
     :rainbowCrow: (cr0w@infosec.exchange)'s status on Thursday, 21-May-2026 00:12:31 JST :rainbowCrow:

     Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices.

     I know people here probably don't want to rehash the disclosure discussion for the 683,547,329th time, but fuck Microsoft and this passive aggressive bullshit trying to frame their own interests as "best practices" in a vuln mitigation publication. Your shit is getting torn apart. Act like you've been there before because we all know you have.

     https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585