New “RedSun” Windows Defender zero-day exploited in the wild

A newly disclosed Windows zero-day vulnerability dubbed “RedSun” is being actively exploited in the wild, allowing attackers to gain SYSTEM privileges by abusing Microsoft Defender. The vulnerability was publicly disclosed by the researcher “Nightmare-Eclipse,” who also released the earlier BlueHammer exploit. The proof-of-concept (PoC) code is available on GitHub and includes a fully working privilege …

The post New “RedSun” Windows Defender zero-day exploited in the wild appeared first on CyberInsider.