shieldbreak

2 articles · newest first

Windows Security app showing Microsoft Defender antivirus status on a laptop screen

Microsoft's own antivirus has a hole in it right now — and even Microsoft can't patch it yet

CVE-2026-69414 lets a local attacker walk straight to SYSTEM through Windows Defender itself, there's still no fix nine days after the CVE was assigned, and CISA just started a clock on it.

Priya Nair · Aug 23 · 6 min

A Windows laptop displaying a security alert, representative of the Defender CVE-2026-50656 ShieldBreak vulnerability

Software

microsoft threatened to sue a researcher for going public. he just broke their patch — again

Microsoft fixed the RoguePlanet Defender flaw in July. On August 12, the same researcher it threatened with legal action published a working bypass — and there's still no patch.

Priya Nair · Aug 14 · 6 min