After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug | TechCrunch

A security researcher going by the pseudonym Nightmare Eclipse has publicly disclosed a new zero-day vulnerability, named ShieldBreak, which affects multiple versions of the Windows operating system.

The exploit targets a security flaw within Windows Defender, enabling attackers to elevate their access privileges to a system-wide level. This public release occurred despite prior warnings and legal threats from Microsoft aimed at curbing unauthorized disclosures of software bugs. Security experts have verified the vulnerability, noting that it successfully bypasses previous patches issued by the tech giant and remains unaddressed by any current security updates.

The conflict highlights ongoing tensions between independent security researchers and Microsoft regarding the disclosure and mitigation of software vulnerabilities. The researcher alleges that the technology company has repeatedly mishandled bug submissions, leaving public disclosure as the only viable path to ensure remediation. Although Microsoft previously threatened legal action against individuals who expose zero-day exploits outside official channels, the security community reacted with widespread criticism, prompting the company to walk back its remarks online. The incident coincides with Microsoft's efforts to accelerate its patching process using artificial intelligence, though this latest zero-day remains an active threat.