Patch for Windows Defender 0-day could allow attackers to fill hard disk
2026-07-10T08:51:55Z•170872a23e3de0ee7b6efb74482eea9899cb9bdf37b8a43325ff05bd7da3b077
0-dayai-abusebotnetcopilotcredential-breachcrypto-clipperguest-vm-escapehypervisorincident-responseinfostealerlinuxlinux-kernelmacosnightmareeclipsepamstealerpatchpeopleoftpeoplesoftpost-quantum-cryptosearchleaksecure-boottwo-factor-authenticationuse-after-freewindowswindows-defender
What happened
Ars Technica security roundup covering multiple high-impact vulnerabilities and incidents: a Windows Defender 0-day patch that could be abused to fill disks (tied to researcher NightmareEclipse), a high-severity Linux guest-VM escape (Google paid $250K), PeopleSoft 0-day data-stealer, a single-character Linux kernel use-after-free allowing root, and a critical Copilot/SearchLeak issue that exposed 2FA codes. Also reported: macOS PamStealer infostealer, a new Crypto Clipper backdoor, a massive credential breach affecting large vendors, AI-assisted botnet attack techniques, Secure Boot key and P
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 170872a23e3de0ee7b6efb74482eea9899cb9bdf37b8a43325ff05bd7da3b077
- Enrichment time
- 2026-07-10T08:51:55Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.