Hackers Exploit Unpatched Vulnerabilities in Windows Defender

Hackers are exploiting three unpatched security vulnerabilities in Windows Defender to target organizations, TechCrunch reported. The vulnerabilities allow attackers to gain high-level or administrator access to affected Windows computers.

Disclosed A security researcher known as Chaotic Eclipse published details of the vulnerabilities and exploit code on their blog and GitHub page.

Earlier this month, Chaotic Eclipse released code for an unpatched vulnerability in Windows. Days later, the researcher published UnDefend, followed by RedSun earlier this week. ” The researcher also wrote, “Huge thanks to MSRC leadership for making this possible,” referring to Microsoft’s Security Response Center.

Response Microsoft’s communications director Ben Hope stated that the company supports coordinated vulnerability disclosure, which involves investigating and addressing issues before public release.

A cybersecurity firm reported that hackers are using the published exploit code in real-world attacks. John Hammond, a researcher at Huntress, stated that the availability of the code creates a race between defenders and cybercriminals. Hammond added that defenders must protect against actors who rapidly adopt these exploits as ready-made tools.