Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
Researcher Chaotic Eclipse published BigDiskBuster, a PoC that blocks Microsoft Defender signature and platform updates.
68
Vendor
Gen Digital
- Mentions · 7d0
- Mentions · 30d0
- All mentions15
- First seenAug 13, 2026
- Last mentionedSep 22, 2026
Timeline
15 articles · newest firstNew Remus Infostealer Steals OpenAI and Anthropic API Tokens, Passwords and Crypto Wallets
SpyCloud Labs details Remus, a Windows infostealer harvesting AI platform API tokens, passwords, 2FA artifacts, and crypto wallets.
68
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT backdoor on Windows machines across East and Southeast Asia.
74
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
Hacker News ThreatsDay digest: malicious browser extensions, AI-agent intrusions, NCSC shadow AI warning, M&A wire fraud, and 119,000-domain fake shops.
25
Serial Microsoft 0-day hunter drops yet another Defender exploit
Researcher Nightmare Eclipse released ShieldCrash, a Microsoft Defender zero-day PoC that bypasses September patches and reads files as SYSTEM.
55
Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Researcher Chaotic Eclipse released FalconFlank, a PoC zero-day privilege escalation exploit against CrowdStrike Falcon's Microsoft Office macro removal feature.
72
Hackers Target Claude, Cursor and Codex AI Agents to Steal Tokens and Prompt Histories
Gen Digital found infostealers like Amatera and Remus stealing AI coding agent tokens, prompt histories, and MCP configs from infected Windows and macOS machines.
58
The 12 Best Antivirus Software for Mac, Compared and Priced
GBHackers ranks 12 Mac antivirus products, naming Bitdefender best overall and noting Gen Digital owns Norton, Avast, and Avira.
15
Infostealers Target Claude, Cursor, Codex and Other AI Agents to Steal Credentials and Sensitive Data
Gen Digital researchers report infostealer families Amatera, Remus and CallbackBeaver now harvest Claude, Cursor and Codex agent data, including tokens and MCP configs.
62
Chaotic Eclipse Released A PoC For NVIDIA GreenSection Memory Corruption Zero-Day
Researcher Chaotic Eclipse released GreenSection, a PoC exploit for an NVIDIA Windows user-mode shared-memory flaw enabling out-of-bounds writes and potential dwm.exe compromise.
50
Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
Elastic documents four persistent REVSTEALER-linked tools (ProManager, WinUpdate, SoftManager, LockAppHost); LockAppHost disables Windows Update and Defender to run a crypto miner.
45
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
Researcher Nightmare Eclipse released a PoC for FalconFlank, a privilege escalation zero-day in CrowdStrike Falcon's Office macro remediation feature.
55
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
Researcher Chaotic Eclipse released FalconFlank, a zero-day privilege escalation PoC abusing CrowdStrike Falcon's Office macro remediation; CrowdStrike is investigating and issued a tech alert.
58
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Gen Digital details WordlistLoader delivering Amatera Stealer via ClickFix and EtherHiding, while SynkLoader phishes Windows credentials through Microsoft Teams.
55
ZDI-26-565: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability
A link-following flaw (CVE-2026-12410, CVSS 7.8) in Gen Digital CCleaner allows local privilege escalation after low-privileged code execution.
20
Related CVEs
by mentions- CVE-2026-694141%7.8Local Elevation of Privilege in Microsoft Defender Malware Protection Engine
- CVE-2026-5065611%7.0Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet "
- CVE-2021-3800339%8.8Memory Corruption in Chromium V8 JSON.stringify Affects Chrome, Edge, Opera
- CVE-2026-12410<1%7.8Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate…
Appears with
- Microsoftvendor · 7
- Kasperskyvendor · 6
- CrowdStrike Falconproduct · 6
- CrowdStrikevendor · 6
- Avast Antivirusproduct · 5
- Windows 11product · 4
- Nvidiavendor · 4
- Avastvendor · 4
- Microsoft Defenderproduct · 4
- Kaspersky Endpoint Securityproduct · 4
- OpenCodeproduct · 3
- Gen Digitalorganization · 3
- Anthropicvendor · 3
- Claude Codeproduct · 3
- Cursorproduct · 3
- Claudeproduct · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.