Nightmare Eclipse

6 posts

/signdrop-windows-clfs-zero-day/signdrop-windows-clfs-zero-day.png
SignDrop Turns the Protection Microsoft Built for Windows Log Files Into SYSTEM Access

November 14, 2026

Nightmare Eclipse, the researcher Microsoft fired, released his 17th exploit since April on Patch Tuesday. There is no patch. It turns Microsoft’s …

/nightmare-eclipse-shieldcrash-defender-patch-bypass/nightmare-eclipse-shieldcrash-defender-patch-bypass.png
Nightmare Eclipse Has a Name Now and ShieldCrash Broke Microsoft's Defender Patch in Two Hours

September 15, 2026

Nightmare Eclipse Has a Name Now and ShieldCrash Broke Microsoft’s Defender Patch in Two Hours Nightmare Eclipse has been dropping Windows zero-days since …

/shieldbreak-defender-nightmare-eclipse/shieldbreak-defender-nightmare-eclipse.png
ShieldBreak Turns Windows Defender Into a Way to SYSTEM on Fully Patched Windows 11

August 24, 2026

Nightmare Eclipse published his tenth Windows attack and it lifts a normal account to SYSTEM. It only works on machines with Defender switched on. It is a full …

/legacyhive-windows-user-profile-hive/legacyhive-windows-privilege-escalation.png
LegacyHive Reopens a Windows Privilege Hole Microsoft Closed 11 Years Ago

July 19, 2026

For weeks he promised that July 14 would shatter Microsoft’s bones. Patch Tuesday came, Microsoft closed a record 622 holes, and hours later he dropped …

/greatxml-bitlocker-bypass/greatxml-bitlocker-bypass.png
GreatXML Turns Windows Defender's Offline Scan Into a BitLocker Bypass

June 12, 2026

Nightmare-Eclipse is back again, this time with a BitLocker bypass called GreatXML that runs straight through Microsoft’s own antivirus. On a Windows …

/rogueplanet-windows-defender-zero-day/rogueplanet-windows-defender-zero-day.png
RoguePlanet Windows Defender Zero Day Hands Any User Full SYSTEM Control

June 10, 2026

Nightmare-Eclipse is back, with a new exploit called RoguePlanet. Windows 10 and 11 have a new zero-day that lets a user with no rights take complete control of …