Microsoft Rushes to Fix Zero-Day Vulnerability in Defender

Microsoft is working on a patch for a zero-day vulnerability in its Defender security software, named ShieldBreak. The vulnerability was disclosed by a security researcher known as Nightmare Eclipse after Microsoft's August Patch Tuesday updates.

Nightmare Eclipse described ShieldBreak as a bypass for another Defender flaw, RoguePlanet, which was fixed in July. According to the researcher, ShieldBreak allows local attackers with limited permissions to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems.

Microsoft has confirmed that it is tracking the vulnerability as CVE-2026-69414 and is working on a patch, but has yet to acknowledge Nightmare Eclipse's discovery of the flaw. The researcher publicly disclosed ShieldBreak without notice to Microsoft as part of an ongoing dispute over its vulnerability disclosure and bug bounty practices.