All articles tagged with #rogueplanet
Microsoft says it is actively developing a patch for ShieldBreak, a Defender privilege-escalation zero-day tied to the RoguePlanet flaw; a Nightmare Eclipse PoC claims the exploit can bypass patches on Windows 11/Server environments with Defender enabled, while Windows 10 variants remain vulnerable, with full details to be released under CVE-2026-69414.
Security researcher NightmareEclipse has published ShieldBreak, a new Windows Defender zero-day that allegedly lets attackers gain full control of a Windows device and may bypass the RoguePlanet patch (CVE-2026-50656). Microsoft is investigating but has not confirmed the claims; external researchers say the POC is legitimate. Tests reportedly work on Windows 11 25H2, Windows Server 2025, and even Windows 10. The disclosure comes ahead of Patch Tuesday, continuing the feud between Microsoft and the researcher over Windows security.
Security researcher Chaotic Eclipse released ShieldBreak, a PoC claiming to bypass the Defender patch for RoguePlanet (CVE-2026-50656) and obtain a SYSTEM shell; the PoC reportedly works on Windows 11 25H2 and Windows Server 2025, with Windows 10 also vulnerable, and Defender’s defense-in-depth updates allegedly leak 8 bytes in some scenarios. Microsoft is investigating while issuing patches for other CVEs in the same wave, including LegacyHive (CVE-2026-62832) and WinSock (CVE-2026-68820), the latter now listed in CISA KEV.
Microsoft released a fix for the RoguePlanet Defender zero-day (CVE-2026-50656) via the Malware Protection Engine update 1.1.26060.3008, following disclosure by Nightmare Eclipse. The race-condition flaw could spawn a SYSTEM-level command prompt on fully patched Windows 10/11, with a PoC claiming success regardless of real-time protection. Microsoft began patching on June 16 and has previously warned of legal action against researchers; this resolution follows a pattern of addressing multiple Windows zero-days disclosed by Nightmare Eclipse, including GreenPlasma, MiniPlasma, and YellowKey.
Microsoft issued security updates addressing RoguePlanet, a privilege-escalation flaw in the Microsoft Malware Protection Engine (mpengine.dll) that could spawn a SYSTEM shell. The fix arrives in Defender engine version 1.1.26060.3008 with defense-in-depth hardening. Disclosed by Chaotic Eclipse, RoguePlanet can be exploited on Windows systems with the June 2026 Patch Tuesday and works regardless of real-time protection. Microsoft says no customer action is required beyond automatic updates.
A new theory proposed by Princeton astrophysicist Amir Siraj suggests that a rogue planet, possibly the size of Earth or Mars, may have been captured by the sun's gravity and could be lurking in the outer reaches of our solar system. This theory is based on calculations of rogue planets in space and the likelihood of their capture during the solar system's formation. While no such planet has been detected yet, the upcoming Large Synoptic Survey Telescope in Chile could potentially discover these hypothetical alien planets when it becomes operational in August 2025.