Microsoft Security Archives • Daily CyberSecurity

MiniPlasma Zero-Day: PoC Exploit Code and Vulnerability Details Publicly Disclosed for Windows 11

MiniPlasma exploit Windows privilege escalation

MiniPlasma Zero-Day: PoC Exploit Code and Vulnerability Details Publicly Disclosed for Windows 11

Do Son May 18, 2026

Details and PoC code for the "MiniPlasma" zero-day exploit are now public. See how a 6-year-old flaw grants SYSTEM access on fully patched Windows 11.

Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest BlueHammer Exploit Microsoft Defender LPE

Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest

Do Son April 23, 2026

CISA adds BlueHammer (CVE-2026-33825) to the KEV catalog. This Microsoft Defender LPE exploit uses TOCTOU to hijack SAM databases. Patch by May 6, 2026.

Windows Snipping Tool Can Leak Your Identity, PoC Available Snipping Tool Exploit CVE-2026-33829

Windows Snipping Tool Can Leak Your Identity, PoC Available

Do Son April 20, 2026

Detailed PoC and exploit code for CVE-2026-33829 are now public. See how the Windows Snipping Tool can leak NTLM hashes and how to patch the flaw.

RedSun: New Windows Defender Zero-Day Turns Protector into Attacker, PoC Publishes RedSun Zero-Day Windows Defender EoP

RedSun: New Windows Defender Zero-Day Turns Protector into Attacker, PoC Publishes

Do Son April 16, 2026

Windows Defender "RedSun" zero-day revealed! This unpatched EoP flaw turns antivirus into a delivery tool for malicious payloads. PoC is public—patch now!

Global Coalition Dismantles Tycoon 2FA’s Phishing Empire Tycoon 2FA AiTM Phishing

Global Coalition Dismantles Tycoon 2FA’s Phishing Empire

Do Son March 5, 2026

Microsoft and Europol lead a global coalition to dismantle Tycoon 2FA, a massive AiTM phishing platform that bypassed MFA for over 500,000 organizations.

Billions at Risk: Critical Windows Notepad Flaw Allows Remote Code Execution Windows Notepad Vulnerability CVE-2026-20841 Notepad Markdown Tables Copilot Streaming

Windows Notepad Vulnerability CVE-2026-20841 Notepad Markdown Tables Copilot Streaming

Billions at Risk: Critical Windows Notepad Flaw Allows Remote Code Execution

Do Son February 11, 2026

Microsoft patches critical Windows Notepad flaw CVE-2026-20841 (CVSS 8.8). Malicious Markdown links allow Remote Code Execution. Update now.

October Patch Tuesday: Microsoft Fixes 6 Zero-Days, Including 4 Actively Exploited Flaws, as Windows 10 Reaches End-of-Life Patch Tuesday Zero-Days, Windows 10 Final Update

Patch Tuesday Zero-Days, Windows 10 Final Update

October Patch Tuesday: Microsoft Fixes 6 Zero-Days, Including 4 Actively Exploited Flaws, as Windows 10 Reaches End-of-Life

Do Son October 15, 2025

Microsoft patched 193 vulnerabilities this month, including six zero-days (four exploited) and issued the final update for Windows 10 (KB5066791).

Unpatched Windows LNK Vulnerability Allows Attacker to Capture NTLM Hash Windows LNK UNC Path Exploit

Unpatched Windows LNK Vulnerability Allows Attacker to Capture NTLM Hash

Do Son April 30, 2025

A researcher reveals an unpatched Windows LNK flaw that allows UNC-based remote execution and NTLM hash capture. Microsoft declined to issue a fix.