LegacyHive

Reported Context (3)

Naceri’s zero-day exploits released this year also include LegacyHive, BlueHammer, RedSun, YellowKey, GreenPlasma, MiniPlasma, and UnDefend, which target Microsoft Defender, BitLocker, and other Windows components. Researcher releases BigDiskBuster zero-day that blocks Microsoft Defender updates
Other exploits made public recently by Nightmare Eclipse include ShieldBreak, which allows an attacker to spawn a shell with System privileges, and LegacyHive, which enables privilege escalation. Nightmare Eclipse Releases HardBreacher Kaspersky Privilege-Escalation PoC
The details of the vulnerability appear to match a proof-of-concept called LegacyHive published by the pseudonymous researcher Nightmare Eclipse hours after last month’s Patch Tuesday — the latest instalment in a Microsoft Patches 419 Vulnerabilities as AI-Driven Flaw Discovery Accelerates

CVE (2)

People (2)

Threat Actors (1)

MITRE ATT&CK (1)

Vendors (2)

Products (4)

Tools (10)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.