eclipse Archives

BetaBeacon

July 17, 2026

This liquid-cooled Android tablet runs PC games natively, and now everyone can buy it

REDMAGIC has launched a new liquid-cooled gaming tablet called Astra 2, equipped with a Snapdragon 8 Elite Gen 5, native PC game emulation support, and a unique design with blue-hued liquid-cooling mechanism and RGB lighting. The tablet features a 9-inch OLED display with an 185Hz refresh rate, 2.4K resolution, and a split 8,300mAh battery for faster charging. It also has two USB-C ports with USB 3.2 Gen 2 and supports DisplayPort output. The tablet comes in two configurations with RAM and storage options and will be available globally next month, starting at 9 for the base variant and 9 for the higher trim.

Winsage

July 16, 2026

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day

A security researcher known as Nightmare Eclipse has revealed a new unpatched vulnerability in Windows, named LegacyHive, which is a local privilege escalation flaw in the Windows User Profile Service. This vulnerability allows attackers to access and load user hives of other accounts, including administrators. Nightmare Eclipse has provided proof-of-concept exploit code that works on systems with Microsoft's July 2026 patches. The exploit initially did not require user credentials but now necessitates them for accessing other hives. Nightmare Eclipse has previously disclosed over half a dozen zero-day vulnerabilities affecting Microsoft products. Microsoft has not yet acknowledged the LegacyHive exploit.

Winsage

July 15, 2026

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse has released a proof-of-concept exploit called LegacyHive, which targets a vulnerability in the Windows User Profile Service. The exploit requires standard user credentials and a third username, potentially an administrator account. It can mount the target user hive in the current user classes root and is designed to reduce the risk of public exploitation. The exploit works across all supported desktop and server versions of Windows, including those updated with the July 2026 Patch Tuesday release. Microsoft is investigating the findings related to LegacyHive. Microsoft has patched 622 vulnerabilities, including two privilege escalation flaws in SharePoint Server (CVE-2026-56164, CVSS score: 5.3) and Active Directory Federation Services (CVE-2026-56155, CVSS score: 7.8), which are actively exploited threats. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included these vulnerabilities in its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to implement fixes by specified deadlines. CISA has also noted active exploitation of several SharePoint Server vulnerabilities, including CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, which allow unauthorized access to vulnerable instances. CVE-2026-56164 enables attackers to send crafted network requests to access functions that should require authorization, leading to privilege escalation without prior authentication. Additionally, CVE-2026-55040 (CVSS score: 9.1) allows remote unauthenticated attackers to bypass authentication on a vulnerable SharePoint server, enabling unauthorized operations.

AppWizard

July 14, 2026

You can now get Nintendo Switch’s rarest Mario game cheaper on PC

Nintendo released Super Mario 3D All-Stars, a collection featuring Super Mario 64, Super Mario Sunshine, and Super Mario Galaxy, but it was limited and lacked significant enhancements. Super Mario 64 is available through Nintendo Switch Online + Expansion Pack, and Super Mario Galaxy has a standalone release, while Super Mario Sunshine is only available in the discontinued collection, making it costly for players. The market for Super Mario 3D All-Stars shows varied pricing, with some sellers inflating prices significantly. An alternative, Super Mario Sunshine ‘ReShine,’ is being developed for PC through decompilation efforts, requiring a physical copy of the original game. Gameplay footage has been shared, demonstrating that the port is fully playable and resembles the original. The ReShine version is not yet publicly available but is expected soon. Playing on PC allows for mods and performance enhancements but may lose the authentic experience. Nintendo has released a Bluetooth GameCube controller for the Nintendo Switch 2, which can be used to recreate the original gameplay feel. The decision to restrict Super Mario Sunshine to the collection raises questions about its availability on the Nintendo Switch Online service.

Tech Optimizer

July 11, 2026

Microsoft closes RoguePlanet vulnerability in Defender: SYSTEM privileges via the antivirus engine

A vulnerability known as RoguePlanet was identified in Microsoft Defender, tracked as CVE-2026-50656. This flaw allows local privilege escalation to the NT AUTHORITYSYSTEM account, requiring an attacker to have local code execution capabilities. It can be exploited through methods such as opening malicious email attachments. The vulnerability is categorized under CWE-59: “Improper Link Resolution Before File Access” and involves a race condition that affects the Defender engine's operations. RoguePlanet was disclosed by security researcher Nightmare-Eclipse on June 10, 2026, and confirmed by various security firms. Microsoft released a fix in version 1.1.26060.3008 of the Microsoft Malware Protection Engine, which should be installed automatically in standard Windows configurations. Users can verify their engine version using PowerShell. The vulnerability affects both Windows 10 and Windows 11 systems with the June 2026 security updates, and disabling real-time protection does not reliably mitigate it.

Winsage

June 30, 2026

A critical Windows 11 and Windows 10 flaw turns Microsoft Defender into a hacker’s best friend

Chaotic Eclipse, also known as Nightmare-Eclipse, bypassed Windows 11's BitLocker security using a USB stick and claimed Microsoft left a backdoor in the system. Following this, Microsoft patched three zero-day exploits named YellowKey, GreenPlasma, and MiniPlasma. Nightmare-Eclipse then revealed another zero-day vulnerability called RoguePlanet, which affects Microsoft Defender on Windows 10 and 11, potentially allowing attackers full control over compromised systems. Microsoft is tracking this vulnerability as CVE-2026-50656 and is working on a security update. Nightmare-Eclipse provided a proof-of-concept exploit and described it as a race condition with variable success rates. Microsoft has promoted Windows Defender as adequate for most users but acknowledged that third-party tools can offer additional protection. The company initially threatened legal action against Nightmare-Eclipse but later decided not to pursue lawsuits against researchers sharing their findings.

Winsage

June 30, 2026

A critical exploit bypasses Microsoft Defender in Windows 11 and Windows 10 — so much for “everyday risk protection without additional software”

Security researcher Chaotic Eclipse, known as Nightmare-Eclipse, bypassed Windows 11's BitLocker security using a USB stick and claimed Microsoft intentionally included a backdoor in the feature. Microsoft responded by patching three zero-day exploits disclosed by Nightmare-Eclipse: YellowKey, GreenPlasma, and MiniPlasma, and is monitoring another exploit called RoguePlanet, cataloged as CVE-2026-50656. The RoguePlanet exploit is a race condition with varying success rates on different machines, achieving a 100% success rate on some devices. Microsoft acknowledged that while Windows 11's Defender is generally sufficient for most users, third-party tools can offer additional security features. Tensions between Nightmare-Eclipse and Microsoft have risen, with the company previously considering legal action but now indicating it will not pursue lawsuits against researchers sharing their findings.

Winsage

June 30, 2026

Windows Defender ‘BlueHammer’ vulnerability now exploited as part of malware campaigns — CISA issues warning despite patch release on April 14

A race condition vulnerability in Windows Defender, known as BlueHammer, has been exploited by the hacker Nightmare Eclipse, allowing attackers to gain SYSTEM user access. Microsoft released a patch for this vulnerability on April 14, but the Cybersecurity and Infrastructure Security Agency (CISA) has flagged it as actively exploited in ransomware campaigns. The average time to apply critical OS patches across Windows 10 and 11 is now 127 days, with enterprise environments averaging 76 days. Estimates suggest that 15% to 26% of Windows 10 machines remain unpatched, with a conservative estimate of 20% translating to one in five machines being vulnerable. Microsoft has extended security updates for Windows 10 until October 14, 2027, but public awareness of the updates remains low.

AppWizard

June 28, 2026

Quantic Dream’s Star Wars: Eclipse is struggling: ‘We’re understaffed,’ say devs

Quantic Dream employees have raised concerns about staffing and project viability for Star Wars: Eclipse, following significant layoffs of 115 employees after the cancellation of their live-service game, Spellcaster Chronicles. Remaining staff believe these layoffs threaten the game's future and staged a strike during a LucasFilm visit to seek support. Employees are frustrated with management's lack of communication with parent company NetEase regarding project resources. They plan further protests, called the “Summer Strike Fest,” to advocate for additional staff needed to complete the game.

AppWizard

June 25, 2026

PC Gamer’s 2025 GOTY is yours for a ludicrous $24 during the Steam Summer Sale

Warhorse Studios is offering a significant discount on Kingdom Come: Deliverance 2 during the Steam Summer Sale, with the game available for a reduced price and the Royal Edition, which includes three additional DLC story packs, also discounted. PC Gamer rated KCD2 at 90%, calling it a “new RPG classic.” The game features an expansive adventure in a detailed Bohemian landscape, with elements reminiscent of Oblivion and The Witcher 3. Players have noted improvements from the first installment, including a new forge expansion and a monastery questline. A new patch has been released that includes bug fixes and a free quest titled "A Jester's Visit." Players do not need to have played the original game to enjoy the sequel, as KCD2 is designed to be welcoming to newcomers.