CRITICALZero Day
Global

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

·Source: The Hacker News

Updated:

Executive Summary

The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for CVE-2026-50656 (CVSS score: 7.8), otherwise known as RoguePlanet. RoguePlanet has been described

Analysis

The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for CVE-2026-50656 (CVSS score: 7.8), otherwise known as RoguePlanet. RoguePlanet has been described

Indicators of Compromise (1)

CVE (1)
CVE-2026-50656
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Aug 12, 2026.

Related Threats

CRITICALZero Day

Shield Breaks: Microsoft Faces Fresh Nightmare Eclipse Zero-Day

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/shield-breaks-microsoft-faces-fresh-nightmare-eclipse-zero-day-image_small-10-a-32573.jpg" align=right hspace=4><b>Attack Manipulates Defender Cloud Hydration to Install an Attacker DLL</b><br>Security researchers reproduced ShieldBreak, a claimed Windows Defender zero-day that manipulates cloud hydration and privileged Windows pr

Bank Info Security
CRITICALZero Day

Hackers Exploiting Unpatched GeoServer Zero-Day

The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. The post Hackers Exploiting Unpatched GeoServer Zero-Day appeared first on SecurityWeek .

SecurityWeek
CRITICALZero Day

Attackers target zero-day vulnerability in geospatial data platform GeoServer

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing geospatial data. The software is widely used by organizations in many industries, including the government, defense, science, education, engineering and technology sectors, and has been targeted by hac

CSO Online