Nightmare-Eclipse Drops ShieldBreak Windows Defender 0

Cybersecuritynews •Guru Baran • August 12, 2026

The prolific and controversial security researcher known as Nightmare-Eclipse (also tracked under the alias Chaotic Eclipse) has released a ninth Windows zero-day exploit called ShieldBreak, and this time the target is Microsoft’s own fix. ShieldBreak demonstrates a complete bypass of the patch Microsoft shipped for RoguePlanet, the Windows Defender elevation-of-privilege flaw tracked as CVE-2026-50656, proving […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Windows Zero-Day 'ShieldBreak' Exploits Microsoft Defender Flaw Security researcher Nightmare Eclipse has disclosed a new zero-day vulnerability named ShieldBreak, which allows attackers to gain SYSTEM-level privileges on fully patched Windows 10, Windows 11, and Windows Server systems. The exploit bypasses Microsoft's previous patch for the RoguePlanet vulnerability (CVE-2026-50656), which was intended to address a local privilege escalation flaw. Nightmare Eclipse claims that the proof of concept (PoC) for ShieldBreak has a 100% success rate when tested on the latest Windows 11 version and Windows Server 2025. The exploit leverages interactions between Microsoft Defender and filesystem objects, tricking Defender into executing malicious code. This release follows a pattern of disclosures by Nightmare Eclipse, who has previously published multiple zero-day exploits against Microsoft products. Microsoft has not yet issued a patch for ShieldBreak, leaving users vulnerable until a fix is released. Experts have confirmed the exploit's functionality, raising concerns about its potential for widespread abuse. 56 sources 70

Extracted Entities

Nightmare-Eclipse Drops ShieldBreak Windows Defender 0

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)

Vulnerabilities (1)