60
60
60
60
60
60
60
Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products
60
60
60
60
60
60
60
60
Russian zero-day broker is willing to pay $20M for zero-day exploits for iPhones and Android devices
60
60
60
60
A WhatsApp zero-day exploit can cost several million dollars
60
60
Microsoft Patches 5 Zero-Day Vulnerabilities Being Exploited in the Wild
60
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day
Researcher Chaotic Eclipse released ShieldCrash, a PoC showing Microsoft Defender's CVE-2026-69414 patch is incomplete, enabling arbitrary file reads as SYSTEM.
Security researcher Chaotic Eclipse published ShieldCrash, a proof-of-concept exploit for the Microsoft Malware Protection Engine privilege escalation vulnerability CVE-2026-69414 (ShieldBreak). The PoC performs arbitrary file reads with SYSTEM privileges on all supported Windows versions, including systems running the September 2026 security updates and Malware Protection Engine version 1.1.26080.3. The researcher claims Microsoft's patch fixed several exploit paths but missed a specific condition that still enables the attack. His recent releases also include zero-day PoCs targeting Nvidia, Kaspersky, Avast, and CrowdStrike Falcon.
72
60
60
Google fixes the second zero-day in Chrome in 2 weeks actively exploited
60
60
60
60
New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender
Researcher Nightmare Eclipse released ShieldCrash, a Microsoft Defender zero-day PoC bypassing ShieldBreak patches to gain System privileges on Windows.
The researcher known as Nightmare Eclipse released a PoC zero-day exploit dubbed ShieldCrash against Microsoft Defender on fully patched Windows systems. The exploit grants arbitrary file read with System privileges and can be used to drop the SAM database. It bypasses Microsoft's September 3 fixes for ShieldBreak (CVE-2026-69414), which itself bypassed patches for the RoguePlanet race condition (CVE-2026-50656). Microsoft has been contacted for comment and has not yet responded.
65
60
60
60
In 2022, more than 40% of zero-day exploits used in the wild were variations of previous issues
60
60
60
60
60
60
60