#bluehammer — Public Fediverse posts on home.social

clacke: exhausted pixie dream boy 🇸🇪🇭🇰💙💛 @[email protected] · 2026-04-30 · 03:00 UTC

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

#infosec #microsoftdefender #defender #redsun #bluehammer #undefend

The New Oil @[email protected] · 2026-04-24 · 16:00 UTC

#CISA orders feds to patch #BlueHammer flaw exploited as zero-day

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-microsoft-defender-flaw-exploited-in-zero-day-attacks/

#cybersecurity

#cisa #bluehammer #cybersecurity

Hackaday [Unofficial] @[email protected] · 2026-04-24 · 14:00 UTC

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://fed.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

#hackadaycolumns #securityhacks #3com #bitwarden #bluehammer #dns

Hackaday [Unofficial] @[email protected] · 2026-04-24 · 14:00 UTC

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://web.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

#hackadaycolumns #securityhacks #3com #bitwarden #bluehammer #dns

Hackaday [Unofficial] @[email protected] · 2026-04-24 · 14:00 UTC

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://fed.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

#thisweekinsecurity #supplychain #srilanka #signal #security #nextcloud

Hackaday [Unofficial] @[email protected] · 2026-04-24 · 14:00 UTC

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://web.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

#hackadaycolumns #securityhacks #3com #bitwarden #bluehammer #dns

Marcel SIneM(S)US @[email protected] · 2026-04-22 · 03:54 UTC

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

#windows #redsun #undefend #bluehammer #exploit #zeroday

Marcel SIneM(S)US @[email protected] · 2026-04-18 · 06:41 UTC

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

#bluehammer #windows #zeroday #0day #redsun #exploit

Marcel SIneM(S)US @[email protected] · 2026-04-18 · 06:41 UTC

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

#bluehammer #windows #zeroday #0day #redsun #exploit

Marcel SIneM(S)US @[email protected] · 2026-04-18 · 06:41 UTC

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

#microsoftwindows #microsoft #exploit #redsun #0day #zeroday

Marcel SIneM(S)US @[email protected] · 2026-04-18 · 06:41 UTC

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

#bluehammer #windows #zeroday #0day #redsun #exploit

Günter Born @[email protected] · 2026-04-17 · 08:57 UTC

#BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

https://borncity.com/blog/2026/04/16/bluehammer-nachlese-defender-patch-vom-14-4-2026-und-analyse-von-fortra/

#bluehammer

Natanox 🇺🇦🇵🇸 @[email protected] · 2026-04-16 · 18:36 UTC

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun

#bluehammer #security #microsoft #windows #redsun

Klaus Frank @[email protected] · 2026-04-16 · 11:43 UTC

Fully exploitable Windows Defender vulnerability with full source code public for >8 days no CVE assigned so far (BlueHammer).

Writeup: https://hackingpassion.com/bluehammer-windows-defender-zero-day/

Full source code: https://github.com/Nightmare-Eclipse/BlueHammer

/cc @bsi Was ist eigentlich der "Prozess" für vollständig öffentliche Lücken zu denen es seit über einer Woche noch nicht einmal eine CVE Nummer gibt?

Edit: Patch and CVE number CVE-2026-33825 available by now. Took 6 days though.

#infosec #itsec #Microsoft #WindowsDefender #BlueHammer

#infosec #itsec #microsoft #windowsdefender #bluehammer

stux⚡️ @[email protected] · 2026-04-15 · 11:25 UTC

Recently this popped up, #Bluehammer a #Windows exploit that exploits Windows Defender for a local privilege elevation

From user to system level..

It triggers a Defender scan and locks that after, so it can access a certain database that is been backed up while Defender scans to gain system level access

GitHub now gives a warning for the repo it seems:
https://github.com/Nightmare-Eclipse/BlueHammer

Just be careful

#bluehammer #windows