SecurityTom's Hardwareabout 2 hours ago
Windows Defender 'BlueHammer' vulnerability now exploited as part of malware campaigns, CISA issues warning despite patch release on April 14
3 min read
Ransomware gangs are actively exploiting BlueHammer, a high-severity Microsoft Defender privilege escalation vulnerability (CVE-2026-33825) leaked by researcher Nightmare Eclipse in early April. Microsoft patched it on April 14, but Huntress Labs later found zero-day attacks. CISA confirmed active exploitation on Monday.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
