AI Generated Image
Microsoft working on Defender patch for ShieldBreak zero-day
BleepingComputer • • technology
Key Points:
- Microsoft confirmed it is developing a security patch for the "ShieldBreak" zero-day vulnerability in Microsoft Defender, which allows privilege escalation on fully patched Windows 10, Windows 11, and Windows Server systems.
- The vulnerability was disclosed by security researcher "Nightmare Eclipse" shortly after Microsoft's August 2026 Patch Tuesday updates, with a proof-of-concept exploit demonstrating a bypass of the earlier RoguePlanet flaw.
- Microsoft is tracking ShieldBreak as CVE-2026-69414 and acknowledged the issue publicly, stating it is working on a high-quality security update but has not yet credited the researcher who disclosed it.
- Nightmare Eclipse disclosed the vulnerability without prior notice to Microsoft amid an ongoing dispute over the company's vulnerability disclosure and bug bounty policies, leading to tensions and Microsoft warnings about legal action against malicious activity.
- Since April, Nightmare Eclipse has revealed multiple zero-day exploits affecting Microsoft Defender, BitLocker, and other Windows components, highlighting ongoing security challenges for Microsoft products.
