Nightmare Eclipse published the RoguePlanet proof-of-concept exploit, which was then tested by other security researchers and found to be functioning.<\/p>\n
It took Microsoft two weeks to acknowledge<\/a> the flaw and a month in total to release a fix. According to Microsoft\u2019s advisory, CVE-2026-50656 is not actively exploited, but the company assessed that it likely will be.<\/p>\n \u201cMicrosoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats,\u201d Microsoft explained<\/a>.<\/p>\n \u201cFor enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically.\u201d<\/p>\n Users and admins that have opted to keep this default configuration can check whether the fixed Microsoft Malware Protection Engine version (1.1.26060.3008) has been installed. Those that haven\u2019t should trigger the update manually.<\/p>\n An ongoing feud with Microsoft<\/p>\n Nightmare Eclipse has been releasing proof-of-concept (PoC) exploits for previously undisclosed vulnerabilityes affecting the Windows operating system since March 2026, and giving them colorful names such as BlueHammer<\/a>, RedSun<\/a>, YellowKey<\/a>, GreenPlasma, and UnDefend (among others). <\/p>\n Some of these exploits have already been used by attackers<\/a> in the wild.<\/p>\n The researcher claims that they have been releasing the PoC exploits because Microsoft mishandled and dismissed their vulnerability reports, and deleted the Microsoft account they used to report the bugs.<\/p>\n Microsoft has not credited Nightmare Eclipse for any the publicly disclosed vulnerabilities.<\/p>\n![](\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2025\/09\/devider.webp.webp\"\/)
<\/p>\n