A cybersecurity researcher known as Nightmare Eclipse has released two new zero-day exploits targeting Microsoft Windows: RoguePlanet and GreatXML. RoguePlanet exploits a vulnerability in Windows Defender to achieve SYSTEM user privileges, allowing for deep system access, though its effectiveness is dependent on specific timing conditions. GreatXML is a bypass for BitLocker encryption, requiring an attacker to place specific files on the Windows recovery partition and trigger a Defender Offline Scan. AI
IMPACT New exploits highlight ongoing vulnerabilities in widely used operating systems, potentially impacting enterprise security and user data.
RANK_REASON Disclosure of specific zero-day exploits targeting widely used software.
- BitLocker
- Chaotic-Eclipse
- Church of Malware
- GreatXML
- Microsoft
- Windows Defender
- Microsoft Security Response Center
- Nightmare Eclipse
- RoguePlanet
- Windows Recovery Environment
- Windows
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →
