After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug

A security researcher has published a new Windows zero-day bug. The vulnerability, dubbed ShieldBreak, allows attackers to gain system-level privileges on fully patched Windows systems. The researcher, who goes by the name Nightmare Eclipse, released the exploit after Microsoft threatened legal action. The exploit bypasses Microsoft Defender, the built-in antivirus software, and grants attackers full control over the system. The researcher has a history of publishing vulnerabilities in response to legal threats from Microsoft.

The exploit was released by Ubitquity, a security firm. The release of the exploit comes after Microsoft had already released a patch for a similar vulnerability. The patch, known as the ShieldBreak Windows Defender patch, was intended to address the issue. However, the researcher found a way to bypass this patch, demonstrating that the vulnerability is still present. The researcher's actions have sparked a debate about the ethics of publishing zero-day exploits and the effectiveness of Microsoft's security measures.

The Register notes that the researcher has a history of publishing vulnerabilities in response to legal threats from Microsoft. This is not the first time the researcher has released an exploit after being threatened with legal action. The researcher's actions have raised questions about the effectiveness of Microsoft's security measures and the ethics of publishing zero-day exploits.