Microsoft Defender “RedSun” Zero-Day (CVE-2026-33825): Unpatched Exploit Grants Full SYSTEM Access
An unpatched zero-day dubbed RedSun (CVE-2026-33825) actively exploits a flaw in Windows Defender’s cloud file rollback mechanism to grant attackers full SYSTEM privileges. A public PoC has been available since April 16 and threat actors are actively deploying it alongside BlueHammer and UnDefend in real attacks.
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.