New Windows LegacyHive Zero-Day Gives Hackers Admin Privileges

**LegacyHive** is a publicly released Windows local privilege escalation (LPE) zero-day (PoC published by "Nightmare Eclipse") that abuses legacy registry hive loading to escalate a low-privilege user to SYSTEM on fully patched Windows systems; no vendor patch currently exists. The report outlines affected environments, detection and mitigation guidance, and warns of elevated ransomware and credential-theft risk due to the public availability of the exploit.