#8
BleepingComputer
general
April 23, 2026 at 11:05 UTC
CISA orders feds to patch BlueHammer flaw exploited as zero-day
By Sergiu Gatlan
AI Summary
CISA ordered federal agencies to patch a Microsoft Defender privilege escalation vulnerability dubbed BlueHammer that was exploited as a zero-day, allowing attackers to access the SAM database and extract NTLM hashes for System privileges. The exploitation demonstrates how security tools themselves can become attack vectors when compromised.
Relevance score: 78.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →