technology
Hackers Exploit Unpatched Vulnerabilities in Windows Defender
A security researcher released details and exploit code for three vulnerabilities in Windows Defender. Hackers are now using this code in attacks on organizations, according to a cybersecurity firm. Microsoft stated it supports coordinated vulnerability disclosure.
Apr 17, 1:48 PM·1m read1 source
Substrate placeholder — needs reviewAudio version
Tap play to generate a narrated version.
Hackers are exploiting three unpatched security vulnerabilities in Windows Defender to target organizations, TechCrunch reported. The vulnerabilities allow attackers to gain high-level or administrator access to affected Windows computers.
Disclosed A security researcher known as Chaotic Eclipse published details of the vulnerabilities and exploit code on their blog and GitHub page.
Earlier this month, Chaotic Eclipse released code for an unpatched vulnerability in Windows. Days later, the researcher published UnDefend, followed by RedSun earlier this week. ” The researcher also wrote, “Huge thanks to MSRC leadership for making this possible,” referring to Microsoft’s Security Response Center.
Response Microsoft’s communications director Ben Hope stated that the company supports coordinated vulnerability disclosure, which involves investigating and addressing issues before public release.
A cybersecurity firm reported that hackers are using the published exploit code in real-world attacks. John Hammond, a researcher at Huntress, stated that the availability of the code creates a race between defenders and cybercriminals. Hammond added that defenders must protect against actors who rapidly adopt these exploits as ready-made tools.
