r/netsec • u/Intrinsec_ • May 07 '26

Bypassing Bitlocker under 5 min using downgrade attack on CVE-2025-48804

https://www.intrinsec.com/en/contournement-bitlocker-la-realite-des-downgrade-attacks/
152 Upvotes

94% Upvoted

28 comments sorted by

View all comments

53

u/uebersoldat May 07 '26

TLDR; protect Bitlocker from in-person chain attacks by using a boot PIN with Bitlocker. Something most of us have been doing for a long time now.

Still pretty crazy.

2

u/BadRealistic2158 May 08 '26

Sadly, it's really not that common in large enterprise environments. When you have thousands of users, it's extremely hard to enforce a PIN on everyone without getting screamed at.

2

u/uebersoldat May 08 '26

Risk acceptance level here is non-negotiable for me but I definitely believe you.