Nightmare Eclipse has released ShieldBreak, a new Microsoft Defender zero-day exploit that bypasses the patched RoguePlanet flaw and can elevate attackers to SYSTEM privileges on fully patched Windows systems. The exploit has been independently confirmed and is part of an ongoing dispute with Microsoft over disclosure and bug bounty practices. #ShieldBreak #RoguePlanet #NightmareEclipse #MicrosoftDefender #Windows11 #WindowsServer
Keypoints
- Nightmare Eclipse disclosed a new Microsoft Defender zero-day named ShieldBreak.
- ShieldBreak bypasses the RoguePlanet flaw patched by Microsoft in July.
- The exploit can grant SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems.
- Will Dormann confirmed that Microsoft Defender must be enabled for the exploit to work.
- The disclosure is part of an ongoing conflict between Microsoft and Nightmare Eclipse over vulnerability handling.