#winre

Analysis · May 19, 2026 · Colten Anderson

YellowKey is unpatched and your travel laptops are exposed today

A public PoC, a TPM-only default, and no patch in sight. TPM+PIN stops the live exploit, but the researcher says a second variant is waiting.