Microsoft Defender Patch Bypass: Researchers Warn of System-Level Control for Attackers

A cybersecurity researcher has created a workaround for Microsoft Defender's security patch, which was recently released to fix a critical vulnerability. The researcher, known as Nightmare Eclipse, has been involved in a long-running battle with Microsoft Security.

The workaround, called ShieldBreak, allows an attacker to gain system-level control once they have gained any level of access. This is concerning because it means that even if a user has applied the patch, they may still be vulnerable to attack.

Experts are warning that this could lead to a loss of trust in official patches and that organizations should not rely solely on Microsoft's fixes to protect their systems. They recommend taking an aggressive defensive stance and implementing additional security measures such as application allowlisting and tightening local admin rights.