Weekly Threat & Lab Roundup: Defender Under Siege, Agent Injection Defense, and Homelab Hardening
Windows Defender Is the Target Now This week’s headline isn’t about some exotic exploit kit. It’s about the security tool itself getting owned. Three zero-days targeting Microsoft Defender — BlueHammer, RedSun, and UnDefend — have shifted from proof-of-concept to active in-the-wild exploitation. All three come from the same researcher (Nightmare-Eclipse / Chaotic Eclipse), who released exploit code publicly in protest over Microsoft’s handling of the disclosure process. Huntress Labs has confirmed hands-on-keyboard attackers combining these with compromised SSL VPN credentials for real intrusions. ...