A newly discovered vulnerability named RedSun allows attackers to gain administrative privileges on Windows 11, 10, and Server systems. This exploit leverages a peculiar behavior in Windows Defender where it rewrites malicious files with cloud tags instead of removing them. By abusing this function, attackers can overwrite critical system files to achieve elevated access. AI
Summary written by gemini-2.5-flash-lite from 1 source. How we write summaries →
RANK_REASON Discovery of a specific vulnerability and exploit method.