Microsoft Scrambles To Patch ShieldBreak Zero-Day Flaw In Windows Defender
Microsoft nemesis Nightmare-Eclipse is at it again, this time with a bypass exploit for his original RoguePlanet Windows Defender privilege escalation exploit. The new exploit, dubbed ShieldBreak, also allows for elevation of privilege within Microsoft Defender. Based on what we know about RoguePlanet, that exploit hinged on a race condition bug that only sometimes worked.
It would seem that Microsoft's July Patch Tuesday, which was supposed to stomp out RoguePlanet, only patched the original holes. According to Nightmare-Eclipse, ShieldBreak is simply an evolution of RoguePlanet that bypasses Microsoft's fix. Meanwhile, ShieldBreak works on Windows 11 25H2, its Canary channel, and Windows Server 2025, and has "a 100% success rate." Windows 10 should also be vulnerable to ShieldBreak, but the PoC code was only made for Windows 11.
At the time of this writing, there is no patch available for ShieldBreak, but our advice to protect yourself similar. Since these...
Copyright of this story solely belongs to hothardware.com. To see the full text click HERE
