Hacks are Abusing Zero-day flaws

[CrimsonFury]

Hackers are abusing unpatched Windows security flaws to hack into organizations | TechCrunch

https://techcrunch.com/2026/04/17/hackers-are-abusing-unpatched-windows-security-flaws-to-hack-into-organizations/

[HitmanMatt53]

This one is a bit of a mess and a cautionary tale about the fallout when researchers go rogue. A disgruntled security researcher going by the handle Chaotic Eclipse published exploit code for unpatched Windows vulnerabilities on their blog after falling out with Microsoft's Security Response Center. Within days, actual threat actors picked up that code and started using it against real organisations.
 
Cybersecurity firm Huntress confirmed it has observed active exploitation of three Windows flaws dubbed BlueHammer, UnDefend, and RedSun. Of the three, only BlueHammer has been patched by Microsoft so far. The other two remain unpatched at time of writing.
 
The researcher's public posts make it clear this was deliberate. They specifically called out MSRC leadership as the motivation. Whether you think Microsoft deserved the pressure or not, the result is that real organisations are being compromised because of it.
 
This sits in a very uncomfortable grey area in the security community. Responsible disclosure exists for a reason. Publishing working exploits for unpatched bugs is not whistleblowing, it is handing ammunition to criminals. Patch BlueHammer immediately if you have not already and keep an eye on updates for the other two.

[Demi-Q]

The "I warned them" angle does not hold up when third parties get hit. Whatever the grievance with Microsoft, the people being compromised right now had nothing to do with it.

[GhostRider]

This is exactly why coordinated disclosure matters. You can pressure a vendor publicly without publishing a working exploit. The researcher crossed a line here.

[Brett42]

Huntress catching this quickly is the silver lining. But it also highlights how fast the gap between "public exploit code exists" and "active exploitation" has become. Basically immediate now.