PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-41091] RedSun: Exploiting Windows Defender's Remediation Workflow

calif.io | research | CVE-2026-41091 | #vulnerability-research | #windows | #exploitation | #edr | #windows-defender | #cve-2026-41091
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# RedSun: Exploiting Windows Defender's Remediation Workflow Just showing some appreciation for Nightmare-Eclipse's excellent work. Hopefully this won't get us banned! Carlos Roque June 1, 2026...
CVE
CVE-2026-41091
Published
Collected

Related coverage

research · calif.io
Dark Elevator (CVE-2026-50343)
# Dark Elevator (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM. Carlos Roque July 22, 2026 windowsmadbugs Contents 1. The Bugs 2. PoC 3. Disclosure Timeline > No...
research · calif.io
Microsoft Exchange 2010 Arbitrary User Impersonation
# Microsoft Exchange 2010 Arbitrary User Impersonation Reading anybody else’s mail on a server Microsoft stopped supporting. Khanh Pham March 5, 2024 windows Contents 1. Arbitrary backend...
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · blog.trailofbits.com
ETW internals for security research and forensics
Trail of Bits explains ETW internals — providers, consumers, and secure channels feeding EDR telemetry — and why attackers target ETW to bypass Windows detection and forensics.
research · blog.quarkslab.com
Guided tour inside WinDefender’s network inspection driver
A reverse engineering tour of Windows Defender's network inspection driver (WdNisDrv), covering its WFP-based design, the security descriptor protecting the device object, and the bugs it revealed.
research · projectblack.io
Announcing Partnerships with KnowBe4 and Sophos
Project Black announces partnerships with KnowBe4 for security awareness training and simulated phishing, and Sophos for EDR, MDR and network protection — expanding its security services portfolio.
Back