New Microsoft Defender Zero Day Exploit Released Publicly Online

A public proof-of-concept zero-day named 'RoguePlanet' targeting Microsoft Defender was disclosed by researcher 'Nightmare Eclipse'; it exploits a local race condition in the anti-malware service to gain shell access on fully patched Windows 10/11 clients. Organizations should immediately review endpoint telemetry, audit administrative tokens and script calls from mounted ISOs, and prioritize mitigations while a server-capable variant and fixes are evaluated.