#bluehammer — Public Fediverse posts

📢 Un chercheur banni de GitHub publie 6 zero-days Windows après un conflit avec Microsoft/MSRC
📝 ...
📖 cyberveille : https://cyberveille.ch/posts/2026-05-27-un-chercheur-banni-de-github-publie-6-zero-days-windows-apres-un-conflit-avec-microsoft-msrc/
🌐 source : https://www.tomshardware.com/tech-industry/cyber-security/microsofts-github-bans-security-researcher-who-posted-zero-day-windows-exploits-because-company-ruined-their-life-expert-claims-action-is-vindictive-and-promises-further-retaliation
#BitLocker #BlueHammer #Cyberveille

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images Updated May 14: This article,…
#NewsBeep #News #Technology #AngryHacker #BlueHammer #ChaoticEclipse #GB #GreenPlasma #NightmareEclpise #UK #UnitedKingdom #Windows #Windows0-Dayexploit #WindowsSecurityAlert #windowswarning #YellowKey
https://www.newsbeep.com/uk/584814/

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images Updated May 14: This article,…
#NewsBeep #News #Technology #AngryHacker #AU #Australia #BlueHammer #ChaoticEclipse #GreenPlasma #NightmareEclpise #Windows #Windows0-Dayexploit #Windowssecurityalert #windowswarning #YellowKey
https://www.newsbeep.com/au/670697/

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images Updated May 14: This article,…
#NewsBeep #News #Technology #AngryHacker #AU #Australia #BlueHammer #ChaoticEclipse #GreenPlasma #NightmareEclpise #Windows #Windows0-Dayexploit #Windowssecurityalert #windowswarning #YellowKey
https://www.newsbeep.com/au/670697/

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images The day following the Microsoft…
#NewsBeep #News #Technology #AngryHacker #AU #Australia #BlueHammer #ChaoticEclipse #GreenPlasma #NightmareEclpise #Windows #Windows0-Dayexploit #Windowssecurityalert #windowswarning #YellowKey
https://www.newsbeep.com/au/668502/

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images The day following the Microsoft…
#NewsBeep #News #Technology #AngryHacker #AU #Australia #BlueHammer #ChaoticEclipse #GreenPlasma #NightmareEclpise #Windows #Windows0-Dayexploit #Windowssecurityalert #windowswarning #YellowKey
https://www.newsbeep.com/au/668502/

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

#CISA orders feds to patch #BlueHammer flaw exploited as zero-day

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-microsoft-defender-flaw-exploited-in-zero-day-attacks/

#cybersecurity

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://fed.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://web.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://fed.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://web.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

https://www.europesays.com/at/113029/ Ungepatchte Windows-Zero-Days RedSun, UnDefend und BlueHammer werden attackiert #AT #Austria #BlueHammer #Exploit #IT #Österreich #RedSun #Science #Science&Technology #Security #Technik #Technology #UnDefend #Windows #WindowsDefender #Wissenschaft #Wissenschaft&Technik

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

https://www.europesays.com/pl/373814/ Windows znowu na celowniku. Hakerzy korzystają z nowej luki #AtakHakerski #Bezpieczeństwo #BlueHammer #cyberbezpieczenstwo #hakerzy #microsoft #Nauka #NaukaITechnika #NaukaTechnika #PL #Poland #Polish #Polska #Polski #Science #ScienceAndTechnology #ScienceTechnology #Technika #Technology #windows

Well, 2 new Windows Defender exploits.. Good job #lowlevel explaining it!
https://youtu.be/Q0pKjLMOvFE?si=3VhMCLwv0vJ7at_h

#bluehammer
#redsun

#BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

https://borncity.com/blog/2026/04/16/bluehammer-nachlese-defender-patch-vom-14-4-2026-und-analyse-von-fortra/

It should've been a known fact that you should never ever piss off a hacker with anime profile pic.

I don't know what is inside Microsoft mind.

Context: A hacker accused Microsoft breached an agreement with them, in retaliation the hacker drop 2 zero days on Microsoft Defender

https://www.youtube.com/watch?v=Q0pKjLMOvFE

#cybersecurity #infosec #hacking #zeroday #microsoft #defender #windowsdefender #antivirus #redsun #bluehammer

It should've been a known fact that you should never ever piss off a hacker with anime profile pic.

I don't know what is inside Microsoft mind.

Context: A hacker accused Microsoft breached an agreement with them, in retaliation the hacker drop 2 zero days on Microsoft Defender

https://www.youtube.com/watch?v=Q0pKjLMOvFE

#cybersecurity #infosec #hacking #zeroday #microsoft #defender #windowsdefender #antivirus #redsun #bluehammer

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun

Fully exploitable Windows Defender vulnerability with full source code public for >8 days no CVE assigned so far (BlueHammer).

Writeup: https://hackingpassion.com/bluehammer-windows-defender-zero-day/

Full source code: https://github.com/Nightmare-Eclipse/BlueHammer

/cc @bsi Was ist eigentlich der "Prozess" für vollständig öffentliche Lücken zu denen es seit über einer Woche noch nicht einmal eine CVE Nummer gibt?

Edit: Patch and CVE number CVE-2026-33825 available by now. Took 6 days though.

#infosec #itsec #Microsoft #WindowsDefender #BlueHammer

Fully exploitable Windows Defender vulnerability with full source code public for >8 days no CVE assigned so far (BlueHammer).

Writeup: https://hackingpassion.com/bluehammer-windows-defender-zero-day/

Full source code: https://github.com/Nightmare-Eclipse/BlueHammer

/cc @bsi Was ist eigentlich der "Prozess" für vollständig öffentliche Lücken zu denen es seit über einer Woche noch nicht einmal eine CVE Nummer gibt?

Edit: Patch and CVE number CVE-2026-33825 available by now. Took 6 days though.

#infosec #itsec #Microsoft #WindowsDefender #BlueHammer

Fully exploitable Windows Defender vulnerability with full source code public for >8 days no CVE assigned so far (BlueHammer).

Writeup: https://hackingpassion.com/bluehammer-windows-defender-zero-day/

Full source code: https://github.com/Nightmare-Eclipse/BlueHammer

/cc @bsi Was ist eigentlich der "Prozess" für vollständig öffentliche Lücken zu denen es seit über einer Woche noch nicht einmal eine CVE Nummer gibt?

Edit: Patch and CVE number CVE-2026-33825 available by now. Took 6 days though.

#infosec #itsec #Microsoft #WindowsDefender #BlueHammer

Fully exploitable Windows Defender vulnerability with full source code public for >8 days no CVE assigned so far (BlueHammer).

Writeup: https://hackingpassion.com/bluehammer-windows-defender-zero-day/

Full source code: https://github.com/Nightmare-Eclipse/BlueHammer

/cc @bsi Was ist eigentlich der "Prozess" für vollständig öffentliche Lücken zu denen es seit über einer Woche noch nicht einmal eine CVE Nummer gibt?

#infosec #itsec #Microsoft #WindowsDefender #BlueHammer

Fully exploitable Windows Defender vulnerability with full source code public for >8 days no CVE assigned so far (BlueHammer).

Writeup: https://hackingpassion.com/bluehammer-windows-defender-zero-day/

Full source code: https://github.com/Nightmare-Eclipse/BlueHammer

/cc @bsi Was ist eigentlich der "Prozess" für vollständig öffentliche Lücken zu denen es seit über einer Woche noch nicht einmal eine CVE Nummer gibt?

Edit: Patch and CVE number CVE-2026-33825 available by now. Took 6 days though.

#infosec #itsec #Microsoft #WindowsDefender #BlueHammer

Recently this popped up, #Bluehammer a #Windows exploit that exploits Windows Defender for a local privilege elevation

From user to system level..

It triggers a Defender scan and locks that after, so it can access a certain database that is been backed up while Defender scans to gain system level access

GitHub now gives a warning for the repo it seems:
https://github.com/Nightmare-Eclipse/BlueHammer

Just be careful

Patch Tuesday, April 2026 Edition

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

Patch Tuesday, April 2026 Edition

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

Patch Tuesday, April 2026 Edition

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

Patch Tuesday, April 2026 Edition

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable