> TritonInfoSec News
Home / Aug 14, 2026 / Story
0
#2 SecurityWeek general August 13, 2026 at 08:38 UTC

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’

By Ionut Arghire

AI Summary

A threat actor known as Nightmare Eclipse (also Chaotic Eclipse/MSNightmare) dropped a zero-day PoC exploit called 'ShieldBreak' on August 2026 Patch Tuesday, demonstrating a patch bypass for CVE-2026-50656 (CVSS 7.8, aka RoguePlanet) in Microsoft Defender that allows any unprivileged user to spawn a shell with SYSTEM privileges. The exploit was released after Microsoft's patch cycle, leaving a window of exposure for unpatched systems. Security teams should prioritize applying the August Patch Tuesday updates immediately.

Read full article → https://www.securityweek.com/nightmare-eclipse-dro…

Relevance score: 90.0/100

# More from August 14

  1. 1
    Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor The Hacker News
  2. 3
    Attackers Exploit SharePoint Authentication Bypass After Public PoC Release The Hacker News
  3. 4
    Critical VMware vCenter RCE flaw exploited for reverse SSH access BleepingComputer
  4. 5
    Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack SecurityWeek
  5. 6
    White House taps security firms for offensive hack-back operations BleepingComputer
  6. 7
    OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning The Hacker News
  7. 8
    New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges BleepingComputer
  8. 9
    Hundreds of fake Chrome VPN extensions route traffic through a proxy BleepingComputer
  9. 10
    Android malware combo takes out loans and relays victims' credit cards BleepingComputer