microsoft threatened to sue a researcher for going public. he just broke their patch — again

Microsoft fixed the RoguePlanet Defender flaw in July. On August 12, the same researcher it threatened with legal action published a working bypass… Aliteq Priya Nair · Software & Systems Editor

CVE-2026-50656 ('RoguePlanet') is a race-condition flaw in Microsoft's Malware Protection Engine (mpengine.dll), the core scanning engine behind Windows Defender, that escalates a standard user to…

What you need to know

Microsoft shipped a fix in Defender engine 1.1.26060.3008 on July 9, 2026, rated Important with a 7.8 CVSS score.

What you need to know

On August 12, researcher Nightmare Eclipse published ShieldBreak, a proof-of-concept bypassing that fix with a reported 100% success rate on Windows 10, 11 25H2/Canary, and Server 2025.

What you need to know

Microsoft says it's 'actively investigating the validity and potential applicability of these claims' — no patch exists for the bypass yet.

What you need to know

The release follows a documented feud: Microsoft's May 2026 blog post threatened legal action against researchers who disclose zero-days outside its process; it was partially walked back on social…

What you need to know

There's no patch for ShieldBreak yet, so lock down local admin rights and Defender tamper protection now — don't wait for Microsoft's investigation to conclude.

Read the full story

Aliteq microsoft threatened to sue a researcher for going public. he just broke their patch — again Read the full story on Aliteq