BigDiskBuster: Microsoft Defender Update DoS PoC

BigDiskBuster: Microsoft Defender Update DoS PoC

A new proof-of-concept called BigDiskBuster has been released by security researcher Abdelhamid Naceri, also known as Nightmare Eclipse. The tool targets the Microsoft Defender Antivirus update mechanism rather than directly…
RoguePlanet Zero-Day – Microsoft Defender

RoguePlanet Zero-Day – Microsoft Defender

A new local privilege escalation zero-day has been disclosed in the Microsoft Malware Protection Engine — the core component powering Microsoft Defender Antivirus and System Center Endpoint Protection. Tracked as…
Microsoft Defender Under Siege

Microsoft Defender Under Siege

Overview Three zero-day exploits targeting Microsoft Defender — BlueHammer, RedSun, and UnDefend — have been confirmed exploited in the wild by threat actors. All three were publicly released on GitHub…
Microsoft Defender Contain User Feature GA

Microsoft Defender Contain User Feature GA

Microsoft has announced that the Defender for endpoint contain user feature is now available to a wider pool of organizations. The feature aims to disrupt human-operated attacks like ransomware, business…