“Thanks to a bug discovered by Rairii in August 2022, attackers can extract your disk encryption key on Windows’ default ‘Device Encryption’ setup.”
Default BitLocker on fully patched Windows gives up its key to anyone with a keyboard and a network cable. Rairii found the bug in August 2022. Microsoft rolled back its own mitigation in August 2024. The real fix needs new Secure Boot certificates across the whole industry, and nobody has shipped it.