tech
After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug
This is the latest zero-day released by security researcher Nightmare Eclipse, despite Microsoft publicly threatening to take legal action against them.
TL;DR
- A new Windows vulnerability named ShieldBreak has been disclosed by security researcher Nightmare Eclipse.
- The bug allows hackers to escalate privileges to gain full system access and control over user data.
- ShieldBreak exploits a flaw in Windows Defender and works on Windows 10, 11, and Server 2025.
- Microsoft had previously threatened legal action against researchers releasing zero-day details outside their disclosure policies.
- Microsoft has not yet released a patch for ShieldBreak, making it a zero-day vulnerability.
- The researcher claims Microsoft's handling of previous bug reports was insufficient, leading to public disclosures.
- Microsoft has stated they are aware of the vulnerability and are investigating.