Hello and welcome to the Thursday, May 14th, 2026 edition of the Sands Internet Stormsiders.

Stormcast, my name is Johannes Ulrich, recording day from San Diego, California.

And this episode is brought you by the sands.edu,

credit certificate program in cyber security engineering. In diaries today, we do have an interesting tool recommendation from Rob. Rob experiment with a tool called proxy fire.

Now, what proxy fire is good at is if you have a Windows system and you're

trying to proxy the HTTP traffic from specific binaries. Now with network

rules and such you're often able to direct traffic to particular destinations to

a proxy but what this tool allows you is to essentially isolate the traffic

from a specific application that you're trying to test. And in the case of Rob, well, he directed

a traffic to Burbsweet in order to better explore an API that a particular application was using.

This approach is really kind of neat in order to cut down on the noise that you often get if you are just sending all traffic to a proxy.

And it can be sometimes challenging to figure out what traffic is actually originating from a specific binary this makes

the entire process so much easier and then you have two new vulnerabilities

being disclosed by Nightmare Eclipse the researcher who will

made a name for themselves by releasing for example Blue Hammer after their bug report was rejected by Microsoft's bug bounty program.

The first vulnerability being released, and I think that's the more serious one, is called Yellow Key.

This particular vulnerability attacks BitLocker in a rather effective way.

So BitLocker, of course, well respected, disc encryption by Microsoft,

but it relies on BitLocker actually locking the disk as the system is being shut down.

And that's the part where Yellow Key comes into place by attaching a USB stick to a Windows system,

and that USB stick must contain very specific files.

The disk is not locked as the system is shut down, and then a user may be able to reboot the system into rescue mode

...