Exploit

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access Source: The Hacker News The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for Read original

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access Source: The Hacker News The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for Read original

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access Source: The Hacker News The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for Read original

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access Source: The Hacker News The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for Read original

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack Source: The Hacker News Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That Read original

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack Source: The Hacker News Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That Read original

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days Source: BleepingComputer Today is Microsoft’s August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. […] Read original

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE Source: The Hacker News Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE-2026-55040 (CVSS 9.1), affects SharePoint Server Subsc Read original

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development Source: The Hacker News OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incident response. “Built on GPT‑5.6 Sol, it is trained to improve capabilities on several specialized cybersecurity tasks (e.g., finding zero Read original

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development Source: The Hacker News OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incident response. “Built on GPT‑5.6 Sol, it is trained to improve capabilities on several specialized cybersecurity tasks (e.g., finding zero Read original