Back Securityaffairs.Co

Chaotic Eclipse Unveils RoguePlanet Exploit Targeting Fully Patched Windows

Securityaffairs.Co •Pierluigi Paganini • June 10, 2026

The researcher Chaotic Eclipse released a PoC for the RoguePlanet Microsoft Defender zero-day, which can grant SYSTEM privileges on fully patched Windows systems. Security researcher Chaotic Eclipse, also known as Nightmare-Eclipse, has published a new proof-of-concept exploit for a RoguePlanet Microsoft Defender zero-day. The flaw relies on a race condition that can provide attackers with […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Nightmare-Eclipse Banned from GitHub and GitLab for Zero-Day Exploits The anonymous security researcher known as Nightmare-Eclipse has been banned from both GitHub and GitLab due to the release of multiple unpatched Windows vulnerabilities. GitHub terminated the account on May 25, 2026, after the researcher disclosed six exploits, including critical privilege escalation vulnerabilities like BlueHammer and YellowKey. Microsoft accused the researcher of violating coordinated vulnerability disclosure practices, leading to a public feud. Following the GitHub ban, Nightmare-Eclipse moved to GitLab, where they continued to release exploits until being suspended on May 26, 2026. The researcher has threatened further disclosures, claiming Microsoft has left them with no choice. The situation has sparked significant backlash within the cybersecurity community, highlighting tensions between researchers and corporate entities over vulnerability disclosure practices. 86 sources 68

Extracted Entities

Chaotic Eclipse Unveils RoguePlanet Exploit Targeting Fully Patched Windows

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)

Vulnerabilities (1)