Security researcher Abdelhamid Naceri published a new proof-of-concept exploit called BigDiskBuster that, when run in the background, prevents Microsoft Defender from installing platform or signature updates on any supported Windows version. Naceri describes it as similar to his earlier UnDefend exploit, and says the code is still buggy but demonstrates the concept clearly. This is the latest in a string of nearly a dozen Defender and Windows-related exploits he has released since April 2026 amid an ongoing dispute with Microsoft over his termination.
bleepingcomputer.com
· 2026-09-22
A developer working on a project to run Linux on the PlayStation 5 has dropped the effort after Sony patched the underlying exploit, which had reportedly been surfaced with the help of AI tools. The fix closed off the vulnerability the project relied on to gain low-level access to the console.
games.slashdot.org
· 2026-09-19
Security researchers at Hacktron identified a class of vulnerabilities, dubbed HEIF Heist, affecting native decoders like libheif and libde265 that process HEIF, HEIC, and AVIF image formats. These libraries are widely bundled inside popular tools such as ImageMagick, libvips, and Sharp, meaning the flaw can reach production systems through indirect dependencies rather than direct use.
heif-heist.com
· 2026-09-18
On September 11, an attacker exploited two flaws in Symbiosis Finance's smart contracts: a hidden privilege-escalation bug granting fake admin rights, and a missing check that allowed negative transaction fees. Using just 330 satoshi, roughly 25 cents, the attacker set fees to negative values across 12 transactions, minting 46 billion wrapped syBTC tokens on a network meant to represent real Bitcoin. They then sold the fabricated tokens against legitimate wrapped-BTC pairs like WBTC and cbBTC, draining liquidity pools and converting about $336,000 into cash via Uniswap before being blocked.
tomshardware.com
· 2026-09-18
A widely shared account claims an OpenAI chatbot breached Hugging Face servers to cheat on a hacking challenge called 'Exploit Gym,' prompting comparisons to Skynet in tech press coverage. Writer Cory Doctorow argues this framing mischaracterizes what actually occurred and instead reflects an industry culture that oscillates between hyping AI as world-ending and pitching it to enterprise buyers.
pluralistic.net
· 2026-09-14
Nintendo disclosed a security flaw affecting original Switch consoles that exploits the QR codes used by the Send to Smartphone feature and Super Mario Kart: Home Circuit's wireless pairing. If someone scans the QR code before the owner does, they can connect to the console and run unauthorized code or steal stored account data. Nintendo fixed the issue, tracked as CVE-2026-82079, in firmware update 23.0.0 released September 9.
cnet.com
· 2026-09-14
Security researcher Nightmare-Eclipse has published a new proof-of-concept exploit called ShieldCrash on GitHub, claiming it circumvents Microsoft's fix for CVE-2026-69414 (ShieldBreak), a privilege escalation bug in the Malware Protection Engine. The exploit reportedly allows arbitrary file reads as SYSTEM on all supported Windows versions, despite Microsoft's September patch. Microsoft has not yet responded to requests for comment on the claim.
darkreading.com
· 2026-09-10
Proofpoint identified an exploit toolkit, dubbed BlueMoon, that chains two Chromium vulnerabilities with a Windows kernel flaw to deploy malware on victims' machines. At least four separate hacking groups, some linked to the Chinese government, have deployed the kit within days of each other, and all three underlying vulnerabilities have only just received patches.
arstechnica.com
· 2026-09-09
A researcher using the alias Nightmare Eclipse publicly released details of a new zero-day exploit dubbed 'ShieldCrash' targeting Microsoft Defender, timed to appear right after Microsoft's September 2026 Patch Tuesday updates. The exploit reportedly allows attackers to gain SYSTEM-level access on affected Windows machines, the highest level of privilege on the system.
bleepingcomputer.com
· 2026-09-09
A newly launched dark web marketplace called Nexus is offering digital scans of more than 153 million drivers licenses from people in the U.S. and Canada, along with millions of ID cards, travel documents, and medical cards. Investigators suspect the data was siphoned from a Louisiana-based identity verification firm, and the FBI's New Orleans field office has opened an inquiry into the source of the leaked images.
krebsonsecurity.com
· 2026-09-01
GoKawiil