3 verified briefings on Encryption. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Following widespread criticism from the tech industry and privacy advocates, the Canadian government is amending its lawful access proposal, Bill C-22. The changes aim to protect encryption standards and provide clearer rules on how companies must handle and retain user metadata for law enforcement.
A new vulnerability called YellowKey allows attackers with access to a Windows device to bypass Bitlocker encryption and access files. Microsoft is working on a permanent patch for the flaw (CVE-2026-45585) and has released temporary mitigation steps for companies to implement immediately.
A new exploit called YellowKey can bypass Windows 11's BitLocker full-disk encryption. Published by a security researcher, the attack works on default deployments but requires direct physical access to the target computer. The vulnerability affects systems that use a TPM to store decryption keys.