> TritonInfoSec News
Home / Jul 18, 2026 / Story
0
#9 BleepingComputer general July 17, 2026 at 11:05 UTC

New Windows LegacyHive zero-day gives hackers admin privileges

By Sergiu Gatlan

AI Summary

A researcher using the handle 'Nightmare Eclipse' publicly released a zero-day exploit dubbed LegacyHive that enables local privilege escalation to administrator on fully patched, up-to-date Windows systems. The public release of a working exploit with no vendor patch available creates immediate risk for Windows deployments and requires defenders to monitor for exploitation activity.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 83.0/100

# More from July 18

  1. 1
    CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV The Hacker News
  2. 2
    New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code The Hacker News
  3. 3
    Inc Ransomware Exploits SonicWall SMA Zero-Days Dark Reading
  4. 4
    OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests The Hacker News
  5. 5
    Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack The Hacker News
  6. 6
    Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack SecurityWeek
  7. 7
    CISA urges immediate action on actively exploited Fortinet flaws BleepingComputer
  8. 8
    GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft The Hacker News
  9. 10
    Now, even Russia's most elite hackers are using Clickfix to infect devices Ars Technica Security