eclipse Archives

Winsage

August 13, 2026

Researcher threatened by Microsoft finds new critical bug in Windows | Researcher had accused Microsoft of mistreatment

A vulnerability in Microsoft Defender, named ShieldBreak, has been revealed by security researcher Nightmare Eclipse, allowing malicious actors to gain complete system-level access to a user's device. Microsoft has previously warned against public disclosure of vulnerabilities and suggested potential legal repercussions for researchers who do so outside its protocols. Users of Microsoft Defender are advised to remain vigilant regarding this vulnerability.

Winsage

August 12, 2026

After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug

A security researcher named Nightmare Eclipse has discovered a vulnerability in Windows, called ShieldBreak, which allows hackers to gain system-wide access to users' devices and sensitive data by exploiting a flaw in Windows Defender. The vulnerability affects Windows 10, Windows 11 (including version 25H2), and Windows Server 2025. A proof-of-concept exploit has been provided, requiring users to run a Windows application to trigger the vulnerability. Security researcher Will Dormann confirmed that Windows Defender must be enabled for the exploit to work. Microsoft has not yet released a patch for ShieldBreak, which is classified as a zero-day vulnerability. This discovery follows previous vulnerabilities disclosed by Nightmare Eclipse, including RoguePlanet, for which Microsoft issued an inadequate patch. The situation has heightened tensions between the researcher and Microsoft regarding the handling of bug reports, especially after Microsoft threatened legal action against researchers disclosing zero-days outside established protocols. The disclosure of ShieldBreak occurred shortly after Microsoft's monthly security patch releases, which have been increasing in number.

Winsage

August 12, 2026

ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

Chaotic Eclipse, a security researcher, has revealed a proof-of-concept (PoC) for a new vulnerability called ShieldBreak, which is a zero-day flaw in Microsoft Defender that bypasses the patch for the previously identified CVE-2026-50656 (RoguePlanet). This vulnerability could allow attackers to execute code at the SYSTEM level on affected Windows systems. Chaotic Eclipse tested the PoC on the latest versions of Windows 11 and Windows Server 2025, achieving a 100% success rate. Windows 10 and its server editions are not supported by the PoC but remain vulnerable. Microsoft had issued security updates for RoguePlanet, which has a CVSS score of 7.8, affecting the Malware Protection Engine and representing a local privilege escalation issue. Chaotic Eclipse has previously disclosed two other zero-day vulnerabilities, YellowKey and GreenPlasma, which affect BitLocker and the Windows Collaborative Translation Framework, respectively. Microsoft criticized the public disclosure of these vulnerabilities as irresponsible and emphasized the importance of Coordinated Vulnerability Disclosure.

AppWizard

August 3, 2026

This week in PC games: Beast of Reincarnation, Big Walk, and Marvel Tōkon, plus a round table RPG, some flammable robots, and a flock of lovestruck pigeons

This week features a variety of new PC game releases: 1. Flow of War: A real-time strategy game with an automated economic system focused on defense. 2. Beast of Reincarnation: A post-apocalyptic action RPG where players embody a samurai version of Poison Ivy with a canine companion. 3. Anomaly President: A 2D roguelite combining political strategy with chaotic adventure. 4. Cielle is Not Happy: A turn-based RPG set across dimensions, balancing order and intuition in a magical world. 5. Big Walk: A multiplayer puzzle adventure from the creators of Untitled Goose Game, set in an Australian park. 6. My Fav Chill Streamer Dies a Million Times: A time-rewinding mystery involving a beloved streamer and chatbox comments. 7. Montabi: A creature-collecting roguelike deckbuilder that questions the use of the term "synergy." 8. Pigeon: A Love Story: A game where players can pursue love or engage in pigeon-related humor. 9. Echobreaker: A cyborg speedrunner with a retro aesthetic. 10. MARVEL Tōkon: Fighting Souls: A dynamic tag-team fighting game from Arc Systems. 11. Sovereign Tower: An Arthurian management RPG focused on recruiting knights and kingdom prosperity. 12. Iron Nest: Heavy Turret Simulator: A tactics game featuring a walking gun for strategic warfare. 13. Grim Axiom: A top-down adventure-horror game exploring eerie environments. 14. Rogue Eclipse: A visually stunning dogfighter inspired by Arabesque Futurism. 15. Grain Rot: An apocalyptic game where players navigate dungeons filled with robots and flammable companions. In the RPS Treehouse, Mark is interviewing modders and discussing the EA acquisition, James is editing features, and the team is contemplating the potential of Beast of Reincarnation. Julian is on holiday, and there are personal musings about gaming possibilities.

AppWizard

August 1, 2026

Halo and Palworld Dethroned by New #1 Best-Selling Steam Game That Is Free for Some

Mistfall Hunter, a dark fantasy extraction action RPG developed by Bellring Games and Skystone Games, has reached the #1 position on the Steam Top Sellers chart, surpassing Palworld and Halo: Campaign Evolved. The game is priced at .99, but is available for .49 until August 10, and is free for PC Game Pass subscribers. It has outperformed other popular titles like Corsair Cove, Baldur’s Gate 3, and Marvel’s Spider-Man 2. Mistfall Hunter has a “Mostly Positive” rating with a 72% approval from 1,526 user reviews, despite some criticism regarding solo content and performance issues. In its first 24 hours, it attracted over 100,000 players.

BetaBeacon

July 17, 2026

This liquid-cooled Android tablet runs PC games natively, and now everyone can buy it

REDMAGIC has launched a new liquid-cooled gaming tablet called Astra 2, equipped with a Snapdragon 8 Elite Gen 5, native PC game emulation support, and a unique design with blue-hued liquid-cooling mechanism and RGB lighting. The tablet features a 9-inch OLED display with an 185Hz refresh rate, 2.4K resolution, and a split 8,300mAh battery for faster charging. It also has two USB-C ports with USB 3.2 Gen 2 and supports DisplayPort output. The tablet comes in two configurations with RAM and storage options and will be available globally next month, starting at 9 for the base variant and 9 for the higher trim.

Winsage

July 16, 2026

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day

A security researcher known as Nightmare Eclipse has revealed a new unpatched vulnerability in Windows, named LegacyHive, which is a local privilege escalation flaw in the Windows User Profile Service. This vulnerability allows attackers to access and load user hives of other accounts, including administrators. Nightmare Eclipse has provided proof-of-concept exploit code that works on systems with Microsoft's July 2026 patches. The exploit initially did not require user credentials but now necessitates them for accessing other hives. Nightmare Eclipse has previously disclosed over half a dozen zero-day vulnerabilities affecting Microsoft products. Microsoft has not yet acknowledged the LegacyHive exploit.

Winsage

July 15, 2026

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse has released a proof-of-concept exploit called LegacyHive, which targets a vulnerability in the Windows User Profile Service. The exploit requires standard user credentials and a third username, potentially an administrator account. It can mount the target user hive in the current user classes root and is designed to reduce the risk of public exploitation. The exploit works across all supported desktop and server versions of Windows, including those updated with the July 2026 Patch Tuesday release. Microsoft is investigating the findings related to LegacyHive. Microsoft has patched 622 vulnerabilities, including two privilege escalation flaws in SharePoint Server (CVE-2026-56164, CVSS score: 5.3) and Active Directory Federation Services (CVE-2026-56155, CVSS score: 7.8), which are actively exploited threats. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included these vulnerabilities in its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to implement fixes by specified deadlines. CISA has also noted active exploitation of several SharePoint Server vulnerabilities, including CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, which allow unauthorized access to vulnerable instances. CVE-2026-56164 enables attackers to send crafted network requests to access functions that should require authorization, leading to privilege escalation without prior authentication. Additionally, CVE-2026-55040 (CVSS score: 9.1) allows remote unauthenticated attackers to bypass authentication on a vulnerable SharePoint server, enabling unauthorized operations.

AppWizard

July 14, 2026

You can now get Nintendo Switch’s rarest Mario game cheaper on PC

Nintendo released Super Mario 3D All-Stars, a collection featuring Super Mario 64, Super Mario Sunshine, and Super Mario Galaxy, but it was limited and lacked significant enhancements. Super Mario 64 is available through Nintendo Switch Online + Expansion Pack, and Super Mario Galaxy has a standalone release, while Super Mario Sunshine is only available in the discontinued collection, making it costly for players. The market for Super Mario 3D All-Stars shows varied pricing, with some sellers inflating prices significantly. An alternative, Super Mario Sunshine ‘ReShine,’ is being developed for PC through decompilation efforts, requiring a physical copy of the original game. Gameplay footage has been shared, demonstrating that the port is fully playable and resembles the original. The ReShine version is not yet publicly available but is expected soon. Playing on PC allows for mods and performance enhancements but may lose the authentic experience. Nintendo has released a Bluetooth GameCube controller for the Nintendo Switch 2, which can be used to recreate the original gameplay feel. The decision to restrict Super Mario Sunshine to the collection raises questions about its availability on the Nintendo Switch Online service.

Tech Optimizer

July 11, 2026

Microsoft closes RoguePlanet vulnerability in Defender: SYSTEM privileges via the antivirus engine

A vulnerability known as RoguePlanet was identified in Microsoft Defender, tracked as CVE-2026-50656. This flaw allows local privilege escalation to the NT AUTHORITYSYSTEM account, requiring an attacker to have local code execution capabilities. It can be exploited through methods such as opening malicious email attachments. The vulnerability is categorized under CWE-59: “Improper Link Resolution Before File Access” and involves a race condition that affects the Defender engine's operations. RoguePlanet was disclosed by security researcher Nightmare-Eclipse on June 10, 2026, and confirmed by various security firms. Microsoft released a fix in version 1.1.26060.3008 of the Microsoft Malware Protection Engine, which should be installed automatically in standard Windows configurations. Users can verify their engine version using PowerShell. The vulnerability affects both Windows 10 and Windows 11 systems with the June 2026 security updates, and disabling real-time protection does not reliably mitigate it.