Every federal civilian agency running Microsoft Defender now faces a two-week countdown to fix two actively exploited ...
Two zero-day flaws in Microsoft Defender, the antivirus engine built into every Windows installation, are already being ...
Update May 25, 04:19 EDT: CVE-2026-41091 is a Microsoft Defender local privilege escalation (LPE) flaw known as RedSun, and CVE-2026-45498 is known as UnDefend, a security flaw that can be exploited ...
Microsoft's May Patch Tuesday looked quiet. Since then, there's been an unpatched Exchange CVE, three Defender flaws, and a new BitLocker bypass.