YellowKey is a vulnerability tracked by ThreatCluster, appearing in 9 threat clusters built from 40 intelligence report mentions.
YellowKey is a vulnerability tracked across 9 threat clusters and 40 intelligence report mentions on ThreatCluster. First observed May 13, 2026; most recent activity July 10, 2026.
A series of critical vulnerabilities have emerged, including CVE-2026-20182, which allows unauthenticated attackers to gain admin access to Cisco Catalyst SD-WAN Controllers. ShinyHunters defaced the Canvas LMS login…
Microsoft has confirmed a critical zero-day vulnerability in Microsoft Defender, identified as CVE-2026-50656, which allows for local privilege escalation. The flaw, dubbed 'RoguePlanet,' was disclosed by security…
A newly disclosed zero-day vulnerability in Visual Studio Code (VS Code) enables attackers to steal GitHub OAuth tokens by tricking users into clicking a malicious link. The flaw exploits the webview message-passing…
On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as…
Security researcher Nightmare-Eclipse has disclosed two critical zero-day vulnerabilities affecting Windows 11 and Windows Server 2022/2025. The first, YellowKey, allows attackers to bypass BitLocker encryption,…
A newly discovered Windows zero-day exploit, named MiniPlasma, allows attackers to gain SYSTEM-level privileges on fully patched Windows systems. The exploit targets the cldflt.sys Cloud Filter driver, specifically the…
The anonymous security researcher known as Nightmare-Eclipse has been banned from both GitHub and GitLab due to the release of multiple unpatched Windows vulnerabilities. GitHub terminated the account on May 25, 2026,…
Several zero-day vulnerabilities, including RedSun, UnDefend, BlueHammer, YellowKey, GreenPlasma, and MiniPlasma, were disclosed without prior notice to Microsoft, exposing customers to risks. Microsoft emphasizes the…
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
YellowKey is a vulnerability tracked by ThreatCluster, appearing in 9 threat clusters built from 40 intelligence report mentions.
The most recent intelligence report mentioning YellowKey on ThreatCluster is dated July 10, 2026. Activity was first observed May 13, 2026, giving a tracked span from then to July 10, 2026.
Across ThreatCluster reporting, YellowKey most frequently co-occurs with Chaotic Eclipse, Nightmare Eclipse, ShinyHunters, DDoS, Denial of Service, among 12 tracked related entities.
The most significant recent cluster is “Critical Vulnerabilities and Exploits Targeting Cisco, Canvas, and Microsoft Systems” (2 articles · Updated May 15, 2026). YellowKey appears across 9 threat clusters in total, listed above with sources.
YellowKey appears in 40 intelligence report mentions across 9 deduplicated threat clusters, aggregated from 17,000+ monitored sources.