> TritonInfoSec News
Home / Sep 11, 2026 / Story
0
#4 SecurityWeek general September 10, 2026 at 07:09 UTC

New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender

By Ionut Arghire

AI Summary

A researcher identified as 'Nightmare-Eclipse' published a new zero-day exploit dubbed 'ShieldCrash' that grants full SYSTEM privileges on Windows machines running the September 2026 security patches, targeting Microsoft Defender. This continues a pattern of deliberate public zero-day releases by this researcher against Microsoft, and the exploit is functional against fully-patched September 2026 systems, leaving no immediate mitigation path via patching. Windows defenders should monitor for exploit use in the wild and apply any out-of-band fixes Microsoft releases.

Read full article → https://www.securityweek.com/new-shieldcrash-zero-…

Relevance score: 85.0/100

# More from September 11

  1. 1
    Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers BleepingComputer
  2. 2
    PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances The Hacker News
  3. 3
    New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws BleepingComputer
  4. 5
    Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE The Hacker News
  5. 6
    CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline The Hacker News
  6. 7
    AI lets small actors run state-level hacking campaigns, Anthropic report finds CyberScoop
  7. 8
    IDScan confirms breach tied to 153 million stolen driver’s licenses BleepingComputer
  8. 9
    Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 The Hacker News
  9. 10
    US says Chinese firms extracted billions of tokens from frontier AI models BleepingComputer