▲ 40 ▼ MS Nightmare (infosec.pub) submitted 4 months ago by redsand@infosec.pub to c/cybersecuritymemes@lemmy.world 5 comments fedilink hide all child comments
[–] TehBamski@lemmy.world 9 points 4 months ago (4 children) Could I get some context please? permalink fedilink source hideshow 4 child comments replies: [–] 01189998819991197253@infosec.pub 21 points 4 months ago (2 children) Sure! https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge TLDR from the link: Nightmare-Eclipse (Chaotic Eclipse) is a malicious actor driven by a personal grievance against Microsoft. The exploits published by this threat actor have been observed in threat activity linked to Russian-geolocated infrastructure. Defenders should prioritize patching CVE-2026-33825, hardening BitLocker and layering network detection and identity controls that operate independently of the compromised endpoint. ... Personal grievance. Claims Microsoft violated an agreement and "left me homeless with nothing." No evidence of financial motive or nation-state affiliation. permalink fedilink source parent hideshow 2 child comments replies: [–] RustyNova@lemmy.world 12 points 4 months ago Malicious actor Not really. They reported the bug properly, Microslop hasn't upholded the contract, so they aren't going to uphold their end either. permalink fedilink source parent [–] TehBamski@lemmy.world 6 points 4 months ago Thank you for filling me in. permalink fedilink source parent [–] plateee@piefed.social 9 points 4 months ago I think it's this: https://www.darkreading.com/vulnerabilities-threats/nightmare-eclipse-microsoft-exploit-rogueplanet permalink fedilink source parent
[–] 01189998819991197253@infosec.pub 21 points 4 months ago (2 children) Sure! https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge TLDR from the link: Nightmare-Eclipse (Chaotic Eclipse) is a malicious actor driven by a personal grievance against Microsoft. The exploits published by this threat actor have been observed in threat activity linked to Russian-geolocated infrastructure. Defenders should prioritize patching CVE-2026-33825, hardening BitLocker and layering network detection and identity controls that operate independently of the compromised endpoint. ... Personal grievance. Claims Microsoft violated an agreement and "left me homeless with nothing." No evidence of financial motive or nation-state affiliation. permalink fedilink source parent hideshow 2 child comments replies: [–] RustyNova@lemmy.world 12 points 4 months ago Malicious actor Not really. They reported the bug properly, Microslop hasn't upholded the contract, so they aren't going to uphold their end either. permalink fedilink source parent [–] TehBamski@lemmy.world 6 points 4 months ago Thank you for filling me in. permalink fedilink source parent
[–] RustyNova@lemmy.world 12 points 4 months ago Malicious actor Not really. They reported the bug properly, Microslop hasn't upholded the contract, so they aren't going to uphold their end either. permalink fedilink source parent
[–] TehBamski@lemmy.world 6 points 4 months ago Thank you for filling me in. permalink fedilink source parent
[–] plateee@piefed.social 9 points 4 months ago I think it's this: https://www.darkreading.com/vulnerabilities-threats/nightmare-eclipse-microsoft-exploit-rogueplanet permalink fedilink source parent