RetroFed Forums
Your home away from modern life.
MS Nightmare
Post Reply
AuthorMessage
redsand infosec.pub redsand@infosec.pub
Joined: 2025-04-09
Quote

39   Original
𝜯𝐞𝐑 𝜝𝐚𝐦𝐬𝐀𝐒 lemmy.world TehBamski@lemmy.world
Joined: 2023-06-23
#2 · Quote Reply

Could I get some context please?

9
π•Έπ–”π–˜π–˜ infosec.pub 01189998819991197253@infosec.pub
Joined: 2023-06-04
#3 · Quote Reply

Could I get some context please?

Sure!

https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge

TLDR from the link:

  • Nightmare-Eclipse (Chaotic Eclipse) is a malicious actor driven by a personal grievance against Microsoft.
  • The exploits published by this threat actor have been observed in threat activity linked to Russian-geolocated infrastructure.
  • Defenders should prioritize patching CVE-2026-33825, hardening BitLocker and layering network detection and identity controls that operate independently of the compromised endpoint.

...

  • Personal grievance. Claims Microsoft violated an agreement and "left me homeless with nothing." No evidence of financial motive or nation-state affiliation.
22
𝜯𝐞𝐑 𝜝𝐚𝐦𝐬𝐀𝐒 lemmy.world TehBamski@lemmy.world
Joined: 2023-06-23
#4 · Quote Reply

Sure! https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge TLDR from the link: Nightmare-Eclipse (Chaotic Eclipse) is a malicious actor driven by a personal grievance against Microsoft. The exploits published by this threat actor have been observed in threat activity linked to Russian-geolocated infrastructure. Defenders should prioritize patching CVE-2026-33825, hardening B...

Thank you for filling me in.

6
plateee piefed.social plateee@piefed.social
Joined: 2025-09-20
#5 · Quote Reply

Could I get some context please?

I think it's this: https://www.darkreading.com/vulnerabilities-threats/nightmare-eclipse-microsoft-exploit-rogueplanet

9
RustyNova lemmy.world RustyNova@lemmy.world
Joined: 2023-11-24
#6 · Quote Reply

Sure! https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge TLDR from the link: Nightmare-Eclipse (Chaotic Eclipse) is a malicious actor driven by a personal grievance against Microsoft. The exploits published by this threat actor have been observed in threat activity linked to Russian-geolocated infrastructure. Defenders should prioritize patching CVE-2026-33825, hardening B...

Malicious actor

Not really. They reported the bug properly, Microslop hasn't upholded the contract, so they aren't going to uphold their end either.

14
Post Reply
Back to top