Microsoft Defender Antivirus

They used PS Exec for lateral movement, and they also launched admin shares with st- using the stolen credentials as well.

They were able to d- they were able to disable Windows Defender monitoring as well.

And then they used AnyDesk, which they deployed then basically on each pr- on each host that they were able to, um, reach in order to maintain that kind of persistent access.

They registered as, as an autostart service so that they could maintain that persistent access even if, um, the computer was rebooted or that kind of thing.

uh security

researcher nightmare eclipse has released another windows zero day proof of concept called shield crash which they claim bypasses microsoft september patch for an earlier windows defender vulnerability the exploit affects the microsoft malware protection engine and according to its github description works against all currently supported windows versions Shield crash follows CVE-2026-69414, known as Shield Break, a privilege escalation vulnerability that Nightmare Eclipse disclosed in August.

Microsoft subsequently patched Shield Break, but the researcher says the fix missed the path that allows essentially the same underlying issue to be triggered again.

Nightmare Eclipse has been releasing Windows exploits around Microsoft's monthly patch Tuesday since April following a dispute with the company over vulnerability reports.

Now, this is not very interesting.

It's just a Defender Antivirus, um, signature update.

But, um, you know, the Windows 11 version 26H2 was in here earlier today.

You might see things like, uh, firmware updates for your PC, driver updates, et cetera.

Uh, Nightmare Eclipse, you know, seems to love dropping Oday in EDR clients.

Normally Windows Defender, uh, has dropped a CrowdStrike bug, uh, which is fun, like an absolute, uh, you know, crazy system-level LPE in, um, uh, in CrowdStrike, so that's fun, uh, causing a bit of drama for the, uh, for CrowdStrike there.

Uh, and the final story we're gonna talk about this week, though, is we've seen [laughs] was it this company like Liquid Networks or whatever they're called? They're like a blockchain company.

Someone discovered some sort of exploit against their, you know, thing, and they left with $320 million of Bitcoin.

But it's the final payloads they drop that are so damaging.

Huntress details that the malware actively evades Windows Defender, disables memory integrity on the operating system, and finally drops XMRig cryptocurrency miners.

OK, I want to break those payloads down.

Disabling memory integrity sounds catastrophic.

So a lot of people are not using standard tools that they need to do to just protect themselves at minimum.

They're still using Norton Antivirus or the vi- you know, the antivirus, Windows Defender.

That's great, but I'm gonna tell you, hackers can get in [laughs] you know, within minutes, you know.

I mean, it's all about protecting your client data.

All right, let's see.

Windows Defender, there's a great oxymoron, was basically claiming there were no updates that had been made.

And Peter Tickton, who you may know, he was the attorney, or still is, I guess, for Tina Peters as well, said, I alerted Todd Blanch, and he stepped in to make sure that the machines that proved that foreign involvement were secured.

All right, so there you go.

I think I still have the USB key around.

But yeah, no, as soon as I plugged it into the PC, Windows Defender went, uh-uh.

No.

You know you messed up to make Windows Defender jump too.

Yeah.

uh junaid hassan says would a bc 250 run gta 6 at 1080p 60 fps no frame gen who the hell knows i don't mean that offensively i just mean the game's not out yet even for console let alone for pc um probably not uh that level hardware on the ps5 is going to do 4k 30 but it's And the BC250 is a PlayStation 5.