Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit

Multiple high-risk security incidents reported: a disgruntled researcher published “BlueHammer,” exploit code for an unpatched Windows privilege-escalation zero-day that allows SYSTEM/elevated access; Fortinet FortiClient EMS suffers an actively exploited critical flaw (CVE-2026-35616) prompting emergency patches and a CISA remediation order; Microsoft links a Medusa ransomware affiliate (Storm-1175) to rapid n-day/zero-day attack activity. Other notable events include an automated credential-theft campaign abusing React2Shell (CVE-2025-55182), a $280M Drift protocol crypto theft tied to a six