#grants


OAuth grants pile up faster than you can review them. Here’s how to keep up.

Oct 9, 2026 // 00:57

Every time an employee clicks “Allow” on an OAuth consent screen, they create a standing trust relationship between two apps. An AI note-taker gets access […]

New Microsoft Defender ‘ShieldCrash’ zero-day grants SYSTEM access

Sep 9, 2026 // 15:37

An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named “ShieldCrash” right after Microsoft rolled out its September […]

New CrowdStrike ‘FalconFlank’ zero-day grants SYSTEM privileges

Sep 4, 2026 // 19:17

An anonymous security researcher who uses the “Nightmare Eclipse” handle released a CrowdStrike Falcon zero-day exploit named “FalconFlank” that lets attackers escalate privileges on up-to-date […]

New Microsoft Defender ‘ShieldBreak’ zero-day grants SYSTEM privileges

Aug 12, 2026 // 13:37

A security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named “ShieldBreak” after Microsoft released the August 2026 Patch Tuesday […]

Hidden backdoor in Tenda router firmware grants admin access

Jul 7, 2026 // 20:37

A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker to gain administrative access to the device’s web […]

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

Jun 10, 2026 // 10:20

The anonymous security researcher going by the name Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit for yet another Microsoft Defender zero-day named […]

Microsoft Defender ‘RoguePlanet’ zero-day grants SYSTEM privileges

Jun 10, 2026 // 02:16

A security researcher has released a new Microsoft Defender zero-day exploit named “RoguePlanet” just hours after Microsoft fixed two previously disclosed flaws during June 2026 […]

Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access

May 7, 2026 // 20:58

Ivanti is warning that a new security flaw impacting Endpoint Manager Mobile (EPMM) has been explored in limited attacks in the wild. The high-severity vulnerability, […]

New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges

Apr 17, 2026 // 01:17

A researcher known as “Chaotic Eclipse” has published a proof-of-concept exploit for a second Microsoft Defender zero-day, dubbed “RedSun,” in the past two weeks, protesting […]

Critical Cisco vulnerability allows unauthorized admin access, bypassing security. Exploitation grants full system control.

Apr 2, 2026 // 17:18

Cisco has issued security updates to fix multiple serious vulnerabilities, including a flaw in the Integrated Management Controller (IMC) that could let attackers bypass security […]