
- Researcher “Chaotic Eclipse” discloses new Microsoft Defender zero‑day dubbed RedSun
- Flaw enables local privilege escalation to SYSTEM by abusing Defender’s file rewrite behavior
- Comes days after BlueHammer release; Microsoft says it investigates and supports coordinated disclosure
The same disgruntled researcher who recently disclosed a zero-day vulnerability in Windows has now done it again, this time targeting Microsoft Defender, the operating system’s native antivirus solution.