> TritonInfoSec News
Home / Sep 08, 2026 / Story
0
#8 SecurityWeek general September 07, 2026 at 12:15 UTC

Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits

By Ionut Arghire

AI Summary

A threat actor named Nightmare Eclipse has published proof-of-concept zero-day exploits targeting CrowdStrike, Nvidia, and Avast products, with each exploit achieving privilege escalation to SYSTEM-level shell access. The simultaneous release of PoCs against three high-profile security and driver vendors significantly raises the risk surface for enterprise endpoints running these products.

Read full article → https://www.securityweek.com/nightmare-eclipse-dro…

Relevance score: 82.0/100

# More from September 08

  1. 1
    Magento StyleSmuggler zero-day exploited to deploy Linux backdoor BleepingComputer
  2. 2
    Adobe Commerce Zero-Day Exploited to Backdoor Online Stores SecurityWeek
  3. 3
    Hackers exploit new MikroTik RouterOS flaws to hijack routers BleepingComputer
  4. 4
    Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication The Hacker News
  5. 5
    N-able patches max severity N-central flaw amid ongoing attacks BleepingComputer
  6. 6
    N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw The Hacker News
  7. 7
    BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations BleepingComputer
  8. 9
    Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts The Hacker News
  9. 10
    Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released The Hacker News