CRITICALZero Day
Global

Microsoft Fix for Defender Zero-Day Draws Fresh Criticism

·Source: Bank Info Security

Updated:

Executive Summary

NightmareEclipse Says Mitigation Can Exhaust Disk Space, Crash Apps Microsoft's patch for CVE-2026-50656, known as RoguePlanet, has sparked fresh criticism after researcher NightmareEclipse alleged the mitigation can

Analysis

NightmareEclipse Says Mitigation Can Exhaust Disk Space, Crash Apps Microsoft's patch for CVE-2026-50656, known as RoguePlanet, has sparked fresh criticism after researcher NightmareEclipse alleged the mitigation can exhaust disk space, crash applications and leak memory, extending a months-long dispute over Microsoft's handling of multiple zero-day disclosures.

Indicators of Compromise (3)

CVE (1)
CVE-2026-50656
NVDMITRE CVE
URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/microsoft-fix-for-defender-zero-day-draws-fresh-criticism-image_small-3-a-32199.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Jul 10, 2026.

Related Threats

CRITICALZero DayPOC

CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

Executive Summary ShieldBreak (CVE-2026-69414) is a zero-day elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Microsoft Defender, allowing a low-privilege local attacker to escalate to SYSTEM. A public PoC was released on August 12, 2026, and Microsoft assigned the CVE on August 14, and no patch is available yet. Qualys VMDR provides detection […]

CVE-2026-69414CVE-2026-50656
Qualys Blog
CRITICALRansomware

Researcher creates workaround for Microsoft Defender security patch

Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent workaround that provides system-level control to attackers once they gain any level of access. The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security . As of publication time, neither Microsoft nor Nightmare E

CVE-2026-50656
CSO Online
CRITICALRansomware

Researcher bypasses Microsoft Defender security patch, seizing control

Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent bypass that provides system-level control to attackers once they gain any level of access. The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security . Nightmare Eclipse has not provided the further details we req

CVE-2026-50656
CSO Online