Microsoft Defender ‘RoguePlanet’ zero-day grants SYSTEM privileges
A new Microsoft Defender zero-day exploit called "RoguePlanet" was made public by a security researcher mere hours after Microsoft addressed two previously reported vulnerabilities during June 2026 Patch Tuesday.
According to the researcher, known as Nightmare Eclipse, a Microsoft Defender race condition vulnerability allows attackers to launch a command prompt with SYSTEM access on fully patched Windows 10 and Windows 11 computers.
After claiming that Microsoft had previously deleted the GitHub and GitLab repositories housing their exploits, the researcher released a proof-of-concept hack on Tuesday afternoon in a self-hosted Git repository.
It's a hit or miss because the exploit is a race condition. On certain machines, I was able to achieve a 100% success rate, but Nightmare E...