New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access:
An anonymous security researcher known as Nightmare Eclipse has released a new ...
bleepingcomputer.com/news/security/new-microsoft-defender-shieldcrash-zero-day-grants-system-access/
Story Details
| Last Updated | |
| Total Articles | 4 |
Main Topics
News on this topic
dlvr.it Sep 09
Serial Microsoft 0-day hunter drops yet another Defender exploit: A bypass of a bypass of a bypass
theregister.com/security/2026/09/09/serial-microsoft-0-day-hunter-drops-yet-another-defender-exploit/5295335
More articles on this subject
Previous
New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access: An anonymous security researcher known as Nightmare Eclipse has released a new ...
bleepingcomputer.com/news/security/new-microsoft-defender-shieldcrash-zero-day-grants-system-access/
Next
Similar to This
Previous
MSNightmare drops ShieldCrash zero-day after Windows 11 patch: A new skeleton proof-of-concept demonstrates an arbitrary file read as SYSTEM on fully updated ...
neowin.net/news/msnightmare-drops-shieldcrash-zero-day-after-windows-11-patch/
Microsoft Scrambles To Patch ShieldBreak Zero-Day Flaw In Windows Defender: The Nightmare-Eclipse and Microsoft saga continues with another major Windows ...
hothardware.com/news/microsoft-scrambles-to-patch-shieldbreak-zero-day-flaw-in-windows-defender
Microsoft working on Defender patch for ShieldBreak zero-day: Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability ...
bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/
Computerworld Aug 16
Researcher bypasses Microsoft Defender security patch, seizing control: The PoC posted by Nightmare Eclipse, who has been feuding with Microsoft for months ...
computerworld.com/article/4208774/researcher-bypasses-microsoft-defender-security-patch-seizing-control-2.html
Microsoft patches LegacyHive Windows zero-day vulnerability: Microsoft has released security patches to address a Windows zero-day vulnerability known as ...
bleepingcomputer.com/news/microsoft/microsoft-patches-legacyhive-windows-zero-day-vulnerability/
Microsoft's nemesis drops new zero-day privilege escalation vulnerability — attack grants system-level privileges, but it could already be patched
tomshardware.com/tech-industry/cyber-security/microsofts-nemesis-drops-new-zero-day-privilege-escalation-vulnerability-attack-grants-system-level-privileges-but-it-could-already-be-patched
This Won't End Well for Windows: LegacyHive Points to a Troubling Future: In the latest escalation of a public feud with Microsoft, security researcher Nightmare ...
pcmag.com/news/this-wont-end-well-for-windows-legacyhive-points-to-a-troubling-future
New Windows LegacyHive zero-day gives hackers admin privileges: A security researcher using the "Nightmare Eclipse" handle has released a Windows ...
bleepingcomputer.com/news/security/new-windows-legacyhive-zero-day-exploit-grants-hackers-admin-access/
Microsoft patches RoguePlanet Defender zero-day vulnerability: Microsoft has released a security patch to address a Defender zero-day vulnerability known as ...
bleepingcomputer.com/news/microsoft/microsoft-patches-rogueplanet-defender-zero-day-vulnerability/
Microsoft working on Defender patch for RoguePlanet zero-day: Microsoft confirmed that it's working on a security patch for a Defender zero-day ...
bleepingcomputer.com/news/microsoft/microsoft-working-on-defender-patch-for-rogueplanet-zero-day/
Nightmare-Eclipse Drops Another BitLocker Bypass After YellowKey Patch: Nightmare-Eclipse, the current bane of Microsoft's existence, strike again with new ...
hothardware.com/news/nightmare-eclipse-drops-another-bitlocker-bypass-after-yellowkey-patch
dlvr.it Jun 10
Nightmare Eclipse publishes new Windows Defender zero-day: Revenge is a dish best served code
theregister.com/security/2026/06/10/nightmare-eclipse-publishes-new-windows-defender-zero-day/5253725
Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges
bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/
Microsoft Mitigates Dangerous YellowKey Tool That Breaks BitLocker: Microsoft has a potential workaround for the recent YellowKey BitLocker exploit ...
hothardware.com/news/microsoft-mitigates-dangerous-yellowkey-tool-that-breaks-bitlocker
A new Windows 11 BitLocker bypass only needs a USB stick, and the researcher thinks it's a backdoor
xda-developers.com/new-windows-11-bitlocker-bypass-needs-usb-stick-researcher-backdoor/
Key FactsUSB-Based Backdoor Breaches BitLocker Encryption
May 14, 2026 · Reading time: ~45 sec.
Summary created with AI assistance · Source: tomshardware.com
Summary created with AI assistance · Source: tomshardware.com
- The YellowKey zero-day exploit allows complete access to BitLocker-encrypted drives by copying files to a USB stick and rebooting into recovery mode.
- The exploit’s files vanish from the USB after use, suggesting a concealed backdoor that raises serious security and political concerns.
- YellowKey affects Windows Server 2022 and 2025 but not Windows 10, and it can bypass TPM-and-PIN configurations.
- Another exploit, GreenPlasma, enables local privilege escalation to system-level access, posing significant risks especially to server systems.
could have made some insane cash selling this, but no amount of money will stand between me and my determination against Microsoft.— Chaotic Eclipse (Nightmare-Eclipse) – regarding the YellowKey zero-day exploit and their stance against Microsoft.
secpod.com Feb 12
Microsoft’s February 2026 Patch Tuesday: Six Zero-Days, 58 flaws Patched Amid Growing Exploit Activity
secpod.com/blog/microsofts-february-2026-patch-tuesday-six-zero-days-patched-amid-growing-exploit-activity/
Next