RedSun exploit gives attackers SYSTEM access by abusing Microsoft Defender on fully patched Windows PCs
VPN Central [Unofficial]
April 19, 2026
A newly disclosed Microsoft Defender exploit called RedSun can let a low-privileged attacker gain full SYSTEM access on fully patched Windows 10, Windows 11, and Windows Server systems. Researchers say the technique abuses Defender’s privileged file-handling path and works even after Microsoft patched the earlier BlueHammer flaw this month. RedSun is not the same bug […]
The post RedSun exploit gives attackers SYSTEM access by abusing Microsoft Defender on fully patched Windows PCs appeared first on VPN Central.
Discussion in the ATmosphere