Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day
2026-07-16T07:24:04Z•d7157c3556d17362467d786034db225f455157f024ac86377af04050f4f16103
AIBitdefenderCISACursorEDR-evasionESETFortinetIvantiLegacyHiveNightmare EclipseProgressRCEServiceNowShareFileSharePointTaniumTenableTrend MicroWindowsbind-linkcode-executionexploited-vulnerabilitiesgitvendor-patcheszero-day
What happened
SecurityWeek roundup: multiple active and newly disclosed vulnerabilities — including in-the-wild SharePoint zero-days — and several vendor patches. Researcher group Nightmare Eclipse published a stripped PoC for a Windows zero-day dubbed “LegacyHive.” CISA warned of three actively exploited SharePoint flaws (two zero-days) and urged immediate patching. Progress confirmed a zero-day caused a ShareFile/Storage Zones disruption and released a fix. Major vendors (Trend Micro, Tanium, ESET, Tenable, Fortinet, Ivanti, ServiceNow) pushed critical/high fixes — ServiceNow’s AI platform had a criticalR
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- d7157c3556d17362467d786034db225f455157f024ac86377af04050f4f16103
- Enrichment time
- 2026-07-16T07:24:04Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.