home.social

#bluehammer — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #bluehammer, aggregated by home.social.

  1. The New Oil @[email protected] ·

    CISA: #Windows #BlueHammer flaw now exploited by #ransomware gangs

    bleepingcomputer.com/news/secu

    #cybersecurity #Microsoft

    #windows #bluehammer #ransomware #cybersecurity #microsoft
  2. The New Oil @[email protected] ·

    CISA: #Windows #BlueHammer flaw now exploited by #ransomware gangs

    bleepingcomputer.com/news/secu

    #cybersecurity #Microsoft

    #windows #bluehammer #ransomware #cybersecurity #microsoft
  3. Martin Boller :debian: :tux: :freebsd: :windows: :mastodon: @[email protected] ·

    NightmareEclipse's new Git home

    NightmareEclipse | Security Researcher focusing on Microsoft

    #NightmareEclipse #RoguePlanet #YellowKey #RedSun #MiniPlasma #YellowKey #BlueHammer #Undefend #GreenPlasma

    #nightmareeclipse #rogueplanet #yellowkey #redsun #miniplasma #bluehammer
  4. Martin Boller :debian: :tux: :freebsd: :windows: :mastodon: @[email protected] ·

    NightmareEclipse's new Git home

    NightmareEclipse | Security Researcher focusing on Microsoft

    #NightmareEclipse #RoguePlanet #YellowKey #RedSun #MiniPlasma #YellowKey #BlueHammer #Undefend #GreenPlasma

    #nightmareeclipse #rogueplanet #yellowkey #redsun #miniplasma #bluehammer
  5. Hacker Memes @[email protected] ·

    EVERYONE GETS AN LPE

    Windows:
    #BlueHammer (#CVE_2026_33825)
    #RedSun (#CVE_2026_41091)
    #UnDefend (#CVE_2026_45498)
    #WindowsInstaller (#CVE_2026_27910):

    Linux:
    #CopyFail (#CVE_2026_31431)
    #SSHKeysignPwn (#CVE_2026_46333)

    FreeBSD:
    #FatGid (#CVE_2026_45250)
    #ExecveBug (#CVE_2026_7270)

    #bluehammer #redsun #undefend #windowsinstaller #copyfail #sshkeysignpwn
  6. Hacker Memes @[email protected] ·

    EVERYONE GETS AN LPE

    Windows:
    #BlueHammer (#CVE_2026_33825)
    #RedSun (#CVE_2026_41091)
    #UnDefend (#CVE_2026_45498)
    #WindowsInstaller (#CVE_2026_27910):

    Linux:
    #CopyFail (#CVE_2026_31431)
    #SSHKeysignPwn (#CVE_2026_46333)

    FreeBSD:
    #FatGid (#CVE_2026_45250)
    #ExecveBug (#CVE_2026_7270)

    #bluehammer #redsun #undefend #windowsinstaller #copyfail #sshkeysignpwn
  7. CyberVeille.ch @[email protected] ·

    📢 Chercheur 'Nightmare-Eclipse' publie plusieurs 0-days Microsoft en représailles contre MSRC
    📝 ## 🔍 Contexte

    Source : blog personnel « Chaotic Eclipse » (deadeclipse666.blogspot.com), publications entre le 2 avril et le 13 mai 2026.
    📖 cyberveille : cyberveille.ch/posts/2026-05-1
    🌐 source : deadeclipse666.blogspot.com/
    #0_day #BlueHammer #Cyberveille

    #cyberveille #bluehammer #0_day
  8. clacke: exhausted pixie dream boy 🇸🇪🇭🇰💙💛 @[email protected] ·

    We'll install MS Defender on your VMs, they said.
    It will make them more secure, they said.

    #infosec #Defender #MicrosoftDefender
    #RedSun #BlueHammer #UnDefend

    #infosec #microsoftdefender #defender #redsun #bluehammer #undefend
  9. clacke: exhausted pixie dream boy 🇸🇪🇭🇰💙💛 @[email protected] ·

    We'll install MS Defender on your VMs, they said.
    It will make them more secure, they said.

    #infosec #Defender #MicrosoftDefender
    #RedSun #BlueHammer #UnDefend

    #infosec #microsoftdefender #defender #redsun #bluehammer #undefend
  10. The New Oil @[email protected] ·

    #CISA orders feds to patch #BlueHammer flaw exploited as zero-day

    bleepingcomputer.com/news/secu

    #cybersecurity

    #cisa #bluehammer #cybersecurity
  11. The New Oil @[email protected] ·

    #CISA orders feds to patch #BlueHammer flaw exploited as zero-day

    bleepingcomputer.com/news/secu

    #cybersecurity

    #cisa #bluehammer #cybersecurity
  12. Hackaday [Unofficial] @[email protected] ·

    This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

    web.brid.gy/r/https://hackaday

    #hackadaycolumns #securityhacks #3com #bitwarden #bluehammer #dns
  13. Analyst207 @[email protected] ·

    CISA Mandates Patching of Exploited BlueHammer Flaw in Federal Systems

    Don't let your federal systems become an easy target: CISA is mandating the patching of the exploited BlueHammer flaw to prevent malicious cyber actors from gaining a foothold. A high-severity vulnerability in Microsoft Defender can allow low-privileged users to gain SYSTEM permissions - but a patch is available.

    osintsights.com/cisa-mandates-

    #Cve202633825 #Bluehammer #MicrosoftDefender #PatchTuesday #PrivilegeEscalation

    #cve202633825 #bluehammer #microsoftdefender #patchtuesday #privilegeescalation
  14. Marcel SIneM(S)US @[email protected] ·

    Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security heise.de/news/Ungepatchte-Wind #exploit #ZeroDay #0day

    #windows #redsun #undefend #bluehammer #exploit #zeroday
  15. Marcel SIneM(S)US @[email protected] ·

    Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security heise.de/news/Ungepatchte-Wind #exploit #ZeroDay #0day

    #windows #redsun #undefend #bluehammer #exploit #zeroday
  16. Marcel SIneM(S)US @[email protected] ·

    Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security heise.de/news/Vom-BlueHammer-A #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

    #bluehammer #windows #zeroday #0day #redsun #exploit
  17. Marcel SIneM(S)US @[email protected] ·

    Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security heise.de/news/Vom-BlueHammer-A #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

    #bluehammer #windows #zeroday #0day #redsun #exploit
  18. Polska @[email protected] ·

    europesays.com/pl/373814/ Windows znowu na celowniku. Hakerzy korzystają z nowej luki #AtakHakerski #Bezpieczeństwo #BlueHammer #cyberbezpieczenstwo #hakerzy #microsoft #Nauka #NaukaITechnika #NaukaTechnika #PL #Poland #Polish #Polska #Polski #Science #ScienceAndTechnology #ScienceTechnology #Technika #Technology #windows

    #windows #technology #technika #sciencetechnology #scienceandtechnology #science
  19. Günter Born @[email protected] ·

    #BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

    borncity.com/blog/2026/04/16/b

    #bluehammer
  20. Günter Born @[email protected] ·

    #BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

    borncity.com/blog/2026/04/16/b

    #bluehammer
  21. Natanox 🇺🇦🇵🇸 @[email protected] ·

    Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
    github.com/Nightmare-Eclipse/R
    #Security #Microsoft #Windows #RedSun

    #bluehammer #security #microsoft #windows #redsun
  22. Natanox 🇺🇦🇵🇸 @[email protected] ·

    Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
    github.com/Nightmare-Eclipse/R
    #Security #Microsoft #Windows #RedSun

    #bluehammer #security #microsoft #windows #redsun
  23. Klaus Frank @[email protected] ·

    Fully exploitable Windows Defender vulnerability with full source code public for >8 days no CVE assigned so far (BlueHammer).

    Writeup: hackingpassion.com/bluehammer-

    Full source code: github.com/Nightmare-Eclipse/B

    /cc @bsi Was ist eigentlich der "Prozess" für vollständig öffentliche Lücken zu denen es seit über einer Woche noch nicht einmal eine CVE Nummer gibt?

    Edit: Patch and CVE number CVE-2026-33825 available by now. Took 6 days though.

    #infosec #itsec #Microsoft #WindowsDefender #BlueHammer

    #infosec #itsec #microsoft #windowsdefender #bluehammer
  24. Klaus Frank @[email protected] ·

    Fully exploitable Windows Defender vulnerability with full source code public for >8 days no CVE assigned so far (BlueHammer).

    Writeup: hackingpassion.com/bluehammer-

    Full source code: github.com/Nightmare-Eclipse/B

    /cc @bsi Was ist eigentlich der "Prozess" für vollständig öffentliche Lücken zu denen es seit über einer Woche noch nicht einmal eine CVE Nummer gibt?

    Edit: Patch and CVE number CVE-2026-33825 available by now. Took 6 days though.

    #infosec #itsec #Microsoft #WindowsDefender #BlueHammer

    #infosec #itsec #microsoft #windowsdefender #bluehammer
  25. stux⚡️ @[email protected] ·

    Recently this popped up, #Bluehammer a #Windows exploit that exploits Windows Defender for a local privilege elevation

    From user to system level..

    It triggers a Defender scan and locks that after, so it can access a certain database that is been backed up while Defender scans to gain system level access

    GitHub now gives a warning for the repo it seems:
    github.com/Nightmare-Eclipse/B

    Just be careful

    #bluehammer #windows
  26. stux⚡️ @[email protected] ·

    Recently this popped up, #Bluehammer a #Windows exploit that exploits Windows Defender for a local privilege elevation

    From user to system level..

    It triggers a Defender scan and locks that after, so it can access a certain database that is been backed up while Defender scans to gain system level access

    GitHub now gives a warning for the repo it seems:
    github.com/Nightmare-Eclipse/B

    Just be careful

    #bluehammer #windows
  27. Analyst207 @[email protected] ·

    Microsoft Rushes Fixes for 167 Vulnerabilities Amid Zero-Day Exploits

    Microsoft just rolled out urgent Patch Tuesday fixes for a whopping 167 vulnerabilities in Windows and related software, including zero-day exploits in SharePoint Server and Windows Defender. But with threats evolving at breakneck speed, can patches keep up to protect our increasingly software-reliant lives?

    osintsights.com/microsoft-rush

    #PatchTuesday #ZeroDay #Bluehammer #GoogleChrome #AdobeReader

    #patchtuesday #zeroday #bluehammer #googlechrome #adobereader
  28. KrebsOnSecurity RSS @[email protected] ·

    Patch Tuesday, April 2026 Edition

    krebsonsecurity.com/2026/04/pa

    #PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

    #patchtuesdayapril2026 #sharepointserver #latestwarnings #thecomingstorm #cve #ryanbraunstein
  29. KrebsOnSecurity RSS @[email protected] ·

    Patch Tuesday, April 2026 Edition

    krebsonsecurity.com/2026/04/pa

    #PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

    #patchtuesdayapril2026 #sharepointserver #latestwarnings #thecomingstorm #cve #ryanbraunstein
  30. KrebsOnSecurity RSS @[email protected] ·

    Patch Tuesday, April 2026 Edition

    krebsonsecurity.com/2026/04/pa

    #PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

    #patchtuesdayapril2026 #sharepointserver #latestwarnings #thecomingstorm #cve #ryanbraunstein
  31. KrebsOnSecurity RSS @[email protected] ·

    Patch Tuesday, April 2026 Edition

    krebsonsecurity.com/2026/04/pa

    #PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

    #patchtuesdayapril2026 #sharepointserver #latestwarnings #thecomingstorm #cve #ryanbraunstein
  32. KrebsOnSecurity RSS @[email protected] ·

    Patch Tuesday, April 2026 Edition

    krebsonsecurity.com/2026/04/pa

    #PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

    #tenable #automox #action1 #bluehammer #willdormann #mikewalters
  33. sedje @sedje ·

    @wdormann Of course Microsoft used their GitHub ownership to remove the repo instead of fixing both problems (the exploit and the video requirement).

    #bluehammer #github #censorship #responsibledisclosure
  34. sedje @[email protected] ·

    @wdormann Of course Microsoft used their GitHub ownership to remove the repo instead of fixing both problems (the exploit and the video requirement).

    #bluehammer #github #censorship #responsibledisclosure

    #bluehammer #github #censorship #responsibledisclosure
  35. Hacker News @[email protected] ·

    BlueHammer abuses Windows Defender's update process to gain SYSTEM access

    hackingpassion.com/bluehammer-

    #HackerNews #BlueHammer #WindowsDefender #ZeroDay #Cybersecurity #Vulnerability #HackingNews

    #hackernews #bluehammer #windowsdefender #zeroday #cybersecurity #vulnerability
  36. Hacker News @[email protected] ·

    BlueHammer abuses Windows Defender's update process to gain SYSTEM access

    hackingpassion.com/bluehammer-

    #HackerNews #BlueHammer #WindowsDefender #ZeroDay #Cybersecurity #Vulnerability #HackingNews

    #hackernews #bluehammer #windowsdefender #zeroday #cybersecurity #vulnerability
  37. Günter Born @[email protected] ·

    #BlueHammer 0-day Schwachstelle im Windows Defender ermöglicht Systemübernahme.

    borncity.com/blog/2026/04/09/b

    #bluehammer
  38. Günter Born @[email protected] ·

    #BlueHammer 0-day Schwachstelle im Windows Defender ermöglicht Systemübernahme.

    borncity.com/blog/2026/04/09/b

    #bluehammer
  39. d0rk ✅ @[email protected] ·

    Researcher drops #zeroday exploit, probably because researcher was pi**ed that #Microsoft required to send in a video.

    #bluehammer

    bleepingcomputer.com/news/secu

    #zeroday #microsoft #bluehammer
  40. d0rk ✅ @[email protected] ·

    Researcher drops #zeroday exploit, probably because researcher was pi**ed that #Microsoft required to send in a video.

    #bluehammer

    bleepingcomputer.com/news/secu

    #zeroday #microsoft #bluehammer
  41. 🅴🆁🆄🅰 🇷🇺 @[email protected] ·
    CW: На днях появился BlueHammer — опубликованный прототип уязвимости нулевого дня в Windows-системах. Позволяет повысить права (привелегии) в системе до уровня учётной записи SYSTEM или расширенных админских.
    Уязвимость нулевого дня оказалась опубликована вместе с протипом (примером) использования. Опубликовано человеком (Chaotic Eclipse), которому не удалось сообщить о проблеме через официальные каналы Microsoft, потому что соответствующее подразделение (MSRC) захотело прямо аж видео с подтверждением работоспособности данной уязвимости. Отказываясь иначе вести диалог и принимать информацию к сведению.

    Это тот апофеоз тотальной идиотии, который преобладает в Microsoft последние 10+ лет. Ниже расписано более детально по этой теме.
    Очередное дно пробито, но это не первый раз, а стабильность — это верный признак мастерства.
    Нет такого, что Linux или BSD-системы вдруг стали модными и популярными, это людям приходится уходить с Windows-систем из-за такого качества работы Microsoft.

    #bluehammer #microsoft #windows #cve #lang_ru @Russia

    RE: https://hub.hubzilla.de/item/fadba136-52e4-46e3-9101-5d8c7b0d61fb
    #bluehammer #microsoft #windows #lang_ru #cve
  42. Marcel SIneM(S)US @[email protected] ·

    „#BlueHammer“: #ZeroDay-Lücke in #Windows :windows: verschafft erhöhte Rechte | Security heise.de/news/BlueHammer-Zero- #Microsoft #Exploit #MicrosoftWindows :windows:

    #bluehammer #zeroday #windows #microsoft #exploit #microsoftwindows
  43. Marcel SIneM(S)US @[email protected] ·

    „#BlueHammer“: #ZeroDay-Lücke in #Windows :windows: verschafft erhöhte Rechte | Security heise.de/news/BlueHammer-Zero- #Microsoft #Exploit #MicrosoftWindows :windows:

    #bluehammer #zeroday #windows #microsoft #exploit #microsoftwindows
  44. TheTomas @[email protected] ·

    Windows Users brace for impact!

    github.com/Nightmare-Eclipse/B

    #BlueHammer #PoC #Windows #hacking

    #bluehammer #poc #windows #hacking