Vulnerabilities Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability. Ionut ArghireJuly 16, 2026
Vulnerabilities Microsoft Patches Defender ‘RoguePlanet’ Vulnerability The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update. Eduard KovacsJuly 9, 2026
Vulnerabilities Microsoft Working on Patch for ‘RoguePlanet’ Zero-Day The public PoC code exploits a race condition in Microsoft Defender to spawn a command prompt with System privileges. Ionut ArghireJune 17, 2026
Endpoint Security ‘GreatXML’ Zero-Day Exploit Bypasses BitLocker The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode. Ionut ArghireJune 11, 2026
Vulnerabilities New Windows Zero-Day Exploit ‘RoguePlanet’ Released Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM. Ionut ArghireJune 10, 2026
Vulnerabilities Researcher Drops YellowKey, GreenPlasma Windows Zero-Days YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System. Ionut ArghireMay 14, 2026