TLDR InfoSec · MISCELLANEOUS

AFTER MICROSOFT THREATENED LEGAL ACTION, A SECURITY RESEARCHER PUBLISHES A NEW WINDOWS ZERO-DAY BUG

techcrunch.com2 min read

Summary from the TLDR InfoSec newsletter

ShieldBreak is a Windows Defender privilege-escalation exploit. A victim must run the supplied app. It affects Windows 10, Windows 11 25H2, and Windows Server 2025. Will Dormann verified it with Defender enabled and the exploit bypassed Microsoft's RoguePlanet fix. Microsoft is investigating and has not released a patch.