23 April 2026 - 12:31

Category: IT Fail

Defender Defending Not A Single Soul

Microsoft Defender has kindly allowed attackers to stroll into the SAM database and help themselves to NTLM hashes. It is lovely when the security software provides the exploit.

Defender Defending Not A Single Soul

Source: SecurityWeek

The Full Story

Severity: Critical Mood: Frustrating

Our primary line of defense has decided to assist attackers in gaining System privileges, which is a bit like a security guard holding the door open for a burglar. This latest zero-day turns Microsoft's own tools against the users, affecting anyone who dared to believe their hashes were safe in the SAM database. Survival requires waiting for yet another patch that will inevitably be followed by a new zero-day within a fortnight or so. It really does make you wonder why we bother installing security software in the first place.

zeroday microsoftlife
Open article →