New Windows Defender zero-day blocks Microsoft antivirus updates
New Windows Defender zero-day exploit BigDiskBuster blocks antivirus updates on all supported Windows versions.
Security researcher Abdelhamid Naceri has released BigDiskBuster, a new Microsoft Defender zero-day exploit that blocks antivirus definition and platform updates on all supported Windows versions. The proof-of-concept requires running in the background to prevent Defender from performing updates, leaving systems stuck with outdated signatures. This is the latest in a series of zero-day exploits released by the researcher as part of an ongoing dispute with Microsoft.
- Researcher releases BigDiskBuster, a zero-day exploit that blocks Microsoft Defender updates.
- The PoC works on all supported Windows versions and requires running in the background.
- This is part of an ongoing dispute between researcher Abdelhamid Naceri and Microsoft.
- The researcher has released multiple zero-days including ShieldCrash for SYSTEM access.
- Vendors
- Microsoft
- Products
- Microsoft DefenderWindows
From the original article
2 min read at bleepingcomputer.com
Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released another Microsoft Defender zero-day exploit that blocks antivirus updates. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.