> TritonInfoSec News
Home / Jul 16, 2026 / Story
0
#4 The Hacker News general July 15, 2026 at 11:07 UTC

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

By [email protected] (The Hacker News)

AI Summary

Hours after Microsoft's July Patch Tuesday, researcher Chaotic Eclipse (aka Nightmare-Eclipse) released a public PoC exploit dubbed LegacyHive targeting the Windows User Profile Service (ProfSvc), described as an arbitrary hive load elevation-of-privilege vulnerability. The exploit provides a powerful privilege escalation primitive, and the researcher warned it is likely capable of broader malicious actions beyond what was demonstrated. The simultaneous release of a PoC on Patch Tuesday significantly compresses the patching window for defenders.

Read full article → https://thehackernews.com/2026/07/researcher-drops…

Relevance score: 88.0/100

# More from July 16

  1. 1
    Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days BleepingComputer
  2. 2
    Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands The Hacker News
  3. 3
    CISA warns admins to patch actively exploited SharePoint flaws BleepingComputer
  4. 5
    Microsoft’s Secure Boot has been broken for a decade and no one noticed until now Ars Technica Security
  5. 6
    US charges alleged operators of Russian bulletproof hosting service BleepingComputer
  6. 7
    Microsoft Patches a Record 570 Security Flaws Krebs on Security
  7. 8
    New phishing kits target Microsoft 365 accounts, evade MFA BleepingComputer
  8. 9
    Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware The Hacker News
  9. 10
    23andMe reaches $18 million settlement with states for massive breach The Record