Windows Defender 0-Day Published Online, Giving Attackers Potential Full Access

A newly disclosed zero-day named "BlueHammer" in Windows Defender allows local privilege escalation to full administrative access; the PoC has been posted publicly and Microsoft has not issued a patch, leaving systems exposed. Security teams are urged to enforce least privilege, restrict unnecessary access, and monitor endpoints for unusual behavior until an official update is released.