The newly disclosed Windows Defender flaw, tracked as CVE-2026-50656, could let attackers escalate privileges on fully ...

A week ago, the security researcher who goes by “Nightmare Eclipse” published information about RoguePlanet, a zero-day security vulnerability in Microsoft’s Defender security program. The ...

Threat actors are using three publicly available proof-of-concept exploits to attack Microsoft Defender and turn the security platform's primary cleanup and protection functions against organizations ...

CISA says ransomware gangs are exploiting Microsoft Defender’s BlueHammer flaw, patched in April 2026 after zero-day reports.

A new Windows zero-day reportedly bypasses BitLocker, adding pressure on Microsoft as researchers debate the exploit’s real-world impact.

Hackers have broken into at least one organization using Windows vulnerabilities published online by a disgruntled security researcher over the last two weeks, according to a cybersecurity firm. On ...

RoguePlanet now has a CVE and a patch in the works, a week after the disclosure of a PoC.

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Microsoft and CISA confirm Defender zero-days exploited in the wild. Microsoft has started ...

CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks.

Update, March 31, 2025: This story, originally published March 29, has been updated with an explanation of LOLBINS as well as further technical information regarding the Windows Defender Application ...