#bluehammer — Public Fediverse posts

📢 CVE-2026-33825 (BlueHammer) dans Microsoft Defender exploitée dans des attaques ransomware
📝 📰 **Source** : SecurityWeek — **Date de publication** : 30 juin 2026

La **CISA** (agence américaine de cyb...
📖 cyberveille : https://cyberveille.ch/posts/2026-07-03-cve-2026-33825-bluehammer-dans-microsoft-defender-exploitee-dans-des-attaques-ransomware/
🌐 source : https://www.securityweek.com/bluehammer-vulnerability-exploited-in-ransomware-attacks/
#BlueHammer #CISA #Cyberveille

CISA: #Windows #BlueHammer flaw now exploited by #ransomware gangs

https://www.bleepingcomputer.com/news/security/cisa-windows-bluehammer-flaw-now-exploited-by-ransomware-gangs/

#cybersecurity #Microsoft

CISA: #Windows #BlueHammer flaw now exploited by #ransomware gangs

https://www.bleepingcomputer.com/news/security/cisa-windows-bluehammer-flaw-now-exploited-by-ransomware-gangs/

#cybersecurity #Microsoft

CISA: #Windows #BlueHammer flaw now exploited by #ransomware gangs

https://www.bleepingcomputer.com/news/security/cisa-windows-bluehammer-flaw-now-exploited-by-ransomware-gangs/

#cybersecurity #Microsoft

CISA: #Windows #BlueHammer flaw now exploited by #ransomware gangs

https://www.bleepingcomputer.com/news/security/cisa-windows-bluehammer-flaw-now-exploited-by-ransomware-gangs/

#cybersecurity #Microsoft

CISA: #Windows #BlueHammer flaw now exploited by #ransomware gangs

https://www.bleepingcomputer.com/news/security/cisa-windows-bluehammer-flaw-now-exploited-by-ransomware-gangs/

#cybersecurity #Microsoft

📢 RoguePlanet et GreatXML : élévation de privilèges et contournement BitLocker sous Windows
📝 ## 🔍 Contexte

Publié le 17 juin 2026 par S...
📖 cyberveille : https://cyberveille.ch/posts/2026-06-29-rogueplanet-et-greatxml-elevation-de-privileges-et-contournement-bitlocker-sous-windows/
🌐 source : https://www.levelblue.com/blogs/spiderlabs-blog/rogueplanet-and-greatxml-detecting-local-privilege-escalation-and-bitlocker-security-boundary-abuse
#BitLocker #BlueHammer #Cyberveille

📢 Zero-day RoguePlanet dans Microsoft Defender : élévation de privilèges, patch en cours
📝 📰 **Source** : SecurityWeek — **Date** : 17 juin 2026

Microsoft a publié un avis de sécurité reconnaissant l'e...
📖 cyberveille : https://cyberveille.ch/posts/2026-06-18-zero-day-rogueplanet-dans-microsoft-defender-elevation-de-privileges-patch-en-cours/
🌐 source : https://www.securityweek.com/microsoft-working-on-patch-for-rogueplanet-zero-day/
#BlueHammer #CVE_2026_33825 #Cyberveille

📢 0-day Windows Defender ' RoguePlanet ' : élévation de privilèges SYSTEM via race condition
📝 📅 **Source** : Cyber Security News — **10 juin 2026** (Patch Tuesday)

🔍 **Contexte**
Le chercheur **Nightmare Ecl...
📖 cyberveille : https://cyberveille.ch/posts/2026-06-13-0-day-windows-defender-rogueplanet-elevation-de-privileges-system-via-race-condition/
🌐 source : https://cybersecuritynews.com/windows-defender-0-day-exploit-rogueplanet/
#BlueHammer #CVE_2026_33825 #Cyberveille

NightmareEclipse's new Git home

NightmareEclipse | Security Researcher focusing on Microsoft

#NightmareEclipse #RoguePlanet #YellowKey #RedSun #MiniPlasma #YellowKey #BlueHammer #Undefend #GreenPlasma

NightmareEclipse's new Git home

NightmareEclipse | Security Researcher focusing on Microsoft

#NightmareEclipse #RoguePlanet #YellowKey #RedSun #MiniPlasma #YellowKey #BlueHammer #Undefend #GreenPlasma

NightmareEclipse's new Git home

NightmareEclipse | Security Researcher focusing on Microsoft

#NightmareEclipse #RoguePlanet #YellowKey #RedSun #MiniPlasma #YellowKey #BlueHammer #Undefend #GreenPlasma

NightmareEclipse's new Git home

NightmareEclipse | Security Researcher focusing on Microsoft

#NightmareEclipse #RoguePlanet #YellowKey #RedSun #MiniPlasma #YellowKey #BlueHammer #Undefend #GreenPlasma

NightmareEclipse's new Git home

NightmareEclipse | Security Researcher focusing on Microsoft

#NightmareEclipse #RoguePlanet #YellowKey #RedSun #MiniPlasma #YellowKey #BlueHammer #Undefend #GreenPlasma

📢 Un chercheur banni de GitHub publie 6 zero-days Windows après un conflit avec Microsoft/MSRC
📝 ...
📖 cyberveille : https://cyberveille.ch/posts/2026-05-27-un-chercheur-banni-de-github-publie-6-zero-days-windows-apres-un-conflit-avec-microsoft-msrc/
🌐 source : https://www.tomshardware.com/tech-industry/cyber-security/microsofts-github-bans-security-researcher-who-posted-zero-day-windows-exploits-because-company-ruined-their-life-expert-claims-action-is-vindictive-and-promises-further-retaliation
#BitLocker #BlueHammer #Cyberveille

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

📢 Zero-day Windows MiniPlasma : escalade de privilèges SYSTEM via cldflt.sys, PoC publié
📝 📰 **Source** : BleepingComputer — **Date de publication** : 17 mai 2026...
📖 cyberveille : https://cyberveille.ch/posts/2026-05-19-zero-day-windows-miniplasma-escalade-de-privileges-system-via-cldflt-sys-poc-publie/
🌐 source : https://www.bleepingcomputer.com/news/microsoft/new-windows-miniplasma-zero-day-exploit-gives-system-access-poc-released/
#BlueHammer #CVE_2020_17103 #Cyberveille

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images Updated May 14: This article,…
#NewsBeep #News #Technology #AngryHacker #BlueHammer #ChaoticEclipse #GB #GreenPlasma #NightmareEclpise #UK #UnitedKingdom #Windows #Windows0-Dayexploit #WindowsSecurityAlert #windowswarning #YellowKey
https://www.newsbeep.com/uk/584814/

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images Updated May 14: This article,…
#NewsBeep #News #Technology #AngryHacker #AU #Australia #BlueHammer #ChaoticEclipse #GreenPlasma #NightmareEclpise #Windows #Windows0-Dayexploit #Windowssecurityalert #windowswarning #YellowKey
https://www.newsbeep.com/au/670697/

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images Updated May 14: This article,…
#NewsBeep #News #Technology #AngryHacker #AU #Australia #BlueHammer #ChaoticEclipse #GreenPlasma #NightmareEclpise #Windows #Windows0-Dayexploit #Windowssecurityalert #windowswarning #YellowKey
https://www.newsbeep.com/au/670697/

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images The day following the Microsoft…
#NewsBeep #News #Technology #AngryHacker #AU #Australia #BlueHammer #ChaoticEclipse #GreenPlasma #NightmareEclpise #Windows #Windows0-Dayexploit #Windowssecurityalert #windowswarning #YellowKey
https://www.newsbeep.com/au/668502/

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

Angry hacker drops more Windows 0-Days in ongoing campaign. NurPhoto via Getty Images The day following the Microsoft…
#NewsBeep #News #Technology #AngryHacker #AU #Australia #BlueHammer #ChaoticEclipse #GreenPlasma #NightmareEclpise #Windows #Windows0-Dayexploit #Windowssecurityalert #windowswarning #YellowKey
https://www.newsbeep.com/au/668502/

📢 Chercheur 'Nightmare-Eclipse' publie plusieurs 0-days Microsoft en représailles contre MSRC
📝 ## 🔍 Contexte

Source : blog personnel « Chaotic Eclipse » (deadeclipse666.blogspot.com), publications entre le 2 avril et le 13 mai 2026.
📖 cyberveille : https://cyberveille.ch/posts/2026-05-13-chercheur-nightmare-eclipse-publie-plusieurs-0-days-microsoft-en-represailles-contre-msrc/
🌐 source : https://deadeclipse666.blogspot.com/
#0_day #BlueHammer #Cyberveille

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

We'll install MS Defender on your VMs, they said.
It will make them more secure, they said.

#infosec #Defender #MicrosoftDefender
#RedSun #BlueHammer #UnDefend

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://fed.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://web.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://fed.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

https://web.brid.gy/r/https://hackaday.com/2026/04/24/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse/

CISA Mandates Patching of Exploited BlueHammer Flaw in Federal Systems

Don't let your federal systems become an easy target: CISA is mandating the patching of the exploited BlueHammer flaw to prevent malicious cyber actors from gaining a foothold. A high-severity vulnerability in Microsoft Defender can allow low-privileged users to gain SYSTEM permissions - but a patch is available.

https://osintsights.com/cisa-mandates-patching-of-exploited-bluehammer-flaw-in-federal-systems?utm_source=mastodon&utm_medium=social

#Cve202633825 #Bluehammer #MicrosoftDefender #PatchTuesday #PrivilegeEscalation

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

Ungepatchte #Windows :windows: -Zero-Days #RedSun, #UnDefend und #BlueHammer werden attackiert | Security https://www.heise.de/news/Ungepatchte-Windows-Zero-Days-RedSun-UnDefend-und-BlueHammer-werden-attackiert-11263691.html #exploit #ZeroDay #0day

https://www.europesays.com/at/113029/ Ungepatchte Windows-Zero-Days RedSun, UnDefend und BlueHammer werden attackiert #AT #Austria #BlueHammer #Exploit #IT #Österreich #RedSun #Science #Science&Technology #Security #Technik #Technology #UnDefend #Windows #WindowsDefender #Wissenschaft #Wissenschaft&Technik

📢 Trois zero-days Microsoft Defender exploités in the wild après publication de PoC
📝 ## 🗓️ Contexte

Source : Help Net Security, article de Zeljka Zorz publié le 17 avril 2026.
📖 cyberveille : https://cyberveille.ch/posts/2026-04-19-trois-zero-days-microsoft-defender-exploites-in-the-wild-apres-publication-de-poc/
🌐 source : https://www.helpnetsecurity.com/2026/04/17/microsoft-defender-zero-days-exploited/
#BlueHammer #CVE_2026_33825 #Cyberveille

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

Vom #BlueHammer-Autor: Neuer #Windows :windows: -#Zeroday verschafft Adminrechte | Security https://www.heise.de/news/Vom-BlueHammer-Autor-Neuer-Windows-Zeroday-verschafft-Adminrechte-11260913.html #0day #RedSun #exploit #Microsoft #MicrosoftWindows :windows:

https://www.europesays.com/pl/373814/ Windows znowu na celowniku. Hakerzy korzystają z nowej luki #AtakHakerski #Bezpieczeństwo #BlueHammer #cyberbezpieczenstwo #hakerzy #microsoft #Nauka #NaukaITechnika #NaukaTechnika #PL #Poland #Polish #Polska #Polski #Science #ScienceAndTechnology #ScienceTechnology #Technika #Technology #windows

Well, 2 new Windows Defender exploits.. Good job #lowlevel explaining it!
https://youtu.be/Q0pKjLMOvFE?si=3VhMCLwv0vJ7at_h

#bluehammer
#redsun

#BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

https://borncity.com/blog/2026/04/16/bluehammer-nachlese-defender-patch-vom-14-4-2026-und-analyse-von-fortra/

#BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

https://borncity.com/blog/2026/04/16/bluehammer-nachlese-defender-patch-vom-14-4-2026-und-analyse-von-fortra/

#BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

https://borncity.com/blog/2026/04/16/bluehammer-nachlese-defender-patch-vom-14-4-2026-und-analyse-von-fortra/

#BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

https://borncity.com/blog/2026/04/16/bluehammer-nachlese-defender-patch-vom-14-4-2026-und-analyse-von-fortra/

#BlueHammer wurde zum 14. April 2026 als Defender Schwachstelle gepatcht. Hier meine Nachlese samt Link auf eine Fortra-Analyse.

https://borncity.com/blog/2026/04/16/bluehammer-nachlese-defender-patch-vom-14-4-2026-und-analyse-von-fortra/

📢 CVE-2026-33825 : Zero-day Windows Defender exploité par BlueHammer et RedSun pour élévation de privilèges
📝 ## 🗓️ Contexte

Publié le 1...
📖 cyberveille : https://cyberveille.ch/posts/2026-04-16-cve-2026-33825-zero-day-windows-defender-exploite-par-bluehammer-et-redsun-pour-elevation-de-privileges/
🌐 source : https://www.picussecurity.com/resource/blog/bluehammer-redsun-windows-defender-cve-2026-33825-zero-day-vulnerability-explained
#BlueHammer #CVE_2026_33825 #Cyberveille

It should've been a known fact that you should never ever piss off a hacker with anime profile pic.

I don't know what is inside Microsoft mind.

Context: A hacker accused Microsoft breached an agreement with them, in retaliation the hacker drop 2 zero days on Microsoft Defender

https://www.youtube.com/watch?v=Q0pKjLMOvFE

#cybersecurity #infosec #hacking #zeroday #microsoft #defender #windowsdefender #antivirus #redsun #bluehammer

It should've been a known fact that you should never ever piss off a hacker with anime profile pic.

I don't know what is inside Microsoft mind.

Context: A hacker accused Microsoft breached an agreement with them, in retaliation the hacker drop 2 zero days on Microsoft Defender

https://www.youtube.com/watch?v=Q0pKjLMOvFE

#cybersecurity #infosec #hacking #zeroday #microsoft #defender #windowsdefender #antivirus #redsun #bluehammer

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun

Pissing off a hacker is never a good idea. The #BlueHammer researcher has dropped another one, abusing Microsoft Defender's dorky behaviour to gain NT Authority privileges.
https://github.com/Nightmare-Eclipse/RedSun
#Security #Microsoft #Windows #RedSun