A zero-day proof-of-concept (PoC) tool named BigDiskBuster was published on GitHub on September 19, capable of preventing Microsoft Defender from installing platform and signature updates. This exploit achieves its objective by consuming all available disk space on a targeted system…
Reports mentioning Microsoft Defender
An anonymous security researcher operating under the alias Nightmare Eclipse has disclosed a new zero-day exploit targeting Microsoft Defender, dubbed "ShieldCrash." This exploit was released shortly after Microsoft deployed its September 2026 Patch Tuesday security updates, indicating it was unpatched…
Security researcher Chaotic Eclipse has released a proof-of-concept (PoC) demonstrating a new vulnerability in Microsoft Defender, codenamed ShieldCrash. This vulnerability is assessed as a patch bypass for CVE-2026-69414, also known as ShieldBreak, which Chaotic Eclipse had previously reported to Microsoft…
Elastic Security Labs has identified four new malicious programs linked to REVSTEALER, a growing information-stealing malware targeting Windows systems. These programs are designed to persist on an infected machine even after the initial REVSTEALER component has been removed.
A sophisticated malware campaign is actively distributing malicious installers through deceptive software-download websites, masquerading as legitimate vendors to trick unsuspecting users. These fake installers are designed to disable critical security features on Windows operating systems, specifically targeting Windows Update…
Check Point Research has disclosed a critical security vulnerability that allows attackers to weaponize a legitimate driver within Microsoft Defender to uninstall security software during the Windows boot process. The technique exploits the BTR.sys (Boot Time Removal Tool) driver…
Microsoft is developing a security patch for the "ShieldBreak" zero-day vulnerability, which was disclosed last week by security researcher "Nightmare Eclipse." This vulnerability is now officially tracked as CVE-2026-69414. The ShieldBreak vulnerability affects Microsoft Defender, a widely used security software…
A security researcher known as Chaotic Eclipse, also operating under aliases such as INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse, has publicly released a proof-of-concept (PoC) for a newly identified zero-day vulnerability affecting Microsoft Defender for Windows.
Microsoft and Nvidia are collaborating to integrate artificial intelligence into active cyber defense strategies, marking a significant shift from traditional, passive security measures. This evolution aims to equip organizations with AI-powered tools that can not only detect threats but also…
Microsoft released a security patch on June 11, 2026, to address a critical zero-day vulnerability within its Microsoft Defender antivirus software. This vulnerability, identified as "RoguePlanet," was disclosed shortly before the company's June 2026 Patch Tuesday update.
Microsoft confirmed a zero-day vulnerability in Microsoft Defender, codenamed RoguePlanet, on March 18, 2026. The flaw, now identified as CVE-2026-50656 with a CVSS score of 7.8, allows for privilege escalation within the Microsoft Malware Protection Engine.
Security researcher Chaotic Eclipse, also known as Nightmare-Eclipse and MSNightmare, unveiled a new exploit named GreatXML on March 19, 2024, that bypasses Windows BitLocker encryption. This discovery followed closely on the heels of their March 18, 2024, release…
Microsoft Defender experienced a zero-day vulnerability named RoguePlanet, which granted SYSTEM access on updated Windows systems. An anonymous security researcher, known as Chaotic Eclipse or Nightmare-Eclipse, released a proof-of-concept (PoC) exploit for this vulnerability.