Hackers are abusing unpatched Windows security flaws to hack into organizations

Active exploitation reported of three Windows Defender vulnerabilities—BlueHammer (patched), UnDefend and RedSun (published by a researcher and unpatched)—after the researcher published proof-of-concept exploit code. Security firm Huntress observed attackers leveraging the publicly available code to breach at least one organization, increasing risk because ready-made tooling enables rapid weaponization by adversaries.