Connect with us

News

Hackers are abusing unpatched Windows security flaws to hack into organizations

info

Published

on

Photo mosh getty windows logo.jpg

Hackers have broken into at least one organization using Windows vulnerabilities published online by a disgruntled security researcher over the last two weeks, according to a cybersecurity firm.

On Friday, cybersecurity company Huntress said in a series of posts on X that its researchers have seen hackers taking advantage of three Windows security flaws, dubbed BlueHammer, UnDefend, and RedSun. 

It’s unclear who the target of this attack is, and who the hackers are.

BlueHammer is the only bug among the three vulnerabilities being exploited that Microsoft has patched so far. A fix for BlueHammer was rolled out earlier this week. 

It appears that the hackers are exploiting the bugs by using exploit code that the security researcher published online. 

Earlier this month, a researcher who goes by Chaotic Eclipse published on their blog what they said was code to exploit an unpatched vulnerability in Windows. The researcher alluded to some conflict with Microsoft as the motivation behind publishing the code. 

“I was not bluffing Microsoft and I’m doing it again,” they wrote. “Huge thanks to MSRC leadership for making this possible,” they added, referring to Microsoft’s Security Response Center, the company’s team that investigates cyberattacks and handles reports of vulnerabilities.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Days later, Chaotic Eclipse published UnDefend, and then earlier this week published RedSun. The researcher published code to exploit all three vulnerabilities on their GitHub page. 

All three vulnerabilities affect the Microsoft-made antivirus Windows Defender, allowing a hacker to gain high-level or administrator access to an affected Windows computer.

TechCunch could not reach Chaotic Eclipse for comment.

In response to a series of specific questions, Microsoft’s communications director Ben Hope said in a statement that the company supports “coordinated vulnerability disclosure, a widely adopted industry practice that helps ensure issues are carefully investigated and addressed before public disclosure, supporting both customer protection and the security research community.”

This is a case of what the cybersecurity industry calls “full disclosure.” When researchers find a flaw, they can report it to the affected software maker to help them fix it. At that point, usually the company acknowledges receipt, and if the vulnerability is legitimate, the company works to patch it. Often, the company and researchers agree on a timeline that establishes when the researcher can publicly explain their findings. 

Sometimes, for a variety of reasons, that communication breaks down and researchers publicly disclose details of the bug. In some cases, in part to prove the existence or severity of a flaw, researchers go a step further and publish “proof-of concept” code capable of abusing that bug.

When that happens, cybercriminals, government hackers, and others can then take the code and use it for their attacks, which prompts cybersecurity defenders to rush to deal with the fallout. 

“With these being so easily available now, and already weaponized for easy use, for better or for worse I think that ultimately puts us in another tug-of-war match between defenders and cybercriminals,” John Hammond, one of the researchers at Huntress who has been tracking the case, told TechCrunch. 

“Scenarios like these cause us to race with our adversaries; defenders frantically try to protect against ill-intended actors who rapidly take advantage of these exploits… especially now as it is just ready-made attacker tooling,” said Hammond.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

Abia voters lament as INEC officials abandon PVC collection centres

info

Published

on

Abia State 1mk.jpg

Eligible voters in Umuahia, Abia State, have expressed anger and disappointment after failing to collect their Permanent Voter Cards (PVCs) on the first day of the nationwide collection exercise.

The voters accused officials of the Independent National Electoral Commission (INEC) of abandoning designated collection centres before the scheduled closing time, despite the importance of obtaining the cards ahead of the 2027 general elections.

According to Vanguard, no INEC officials were present at Ugba Primary School, Umuahia, when its correspondent visited around 2pm on Friday.

A similar situation was observed at School Road Primary School at about 2:42pm, where no electoral officials were seen. Enquiries indicated that the officials who had earlier arrived for the exercise had already left.

Recommended

One of the affected voters, Innocent Odoenelam, a resident of World Bank Housing Estate, Umuahia, said he rushed to the centre after hearing a radio announcement that the PVCs were ready for collection, only to discover that officials had closed for the day.

Odoenelam, who arrived at about 2:30pm, described the experience as discouraging, particularly because the official closing time was 3pm.

He urged INEC to ensure that its personnel remain at designated centres throughout the stipulated collection hours, warning that difficulties in registering and collecting PVCs could discourage eligible citizens from participating in elections.

“I feel heavily disappointed because I left a lot of things I should be doing to rush down here to pick up my PVC. I feel discouraged,” he said.

Despite his frustration, Odoenelam vowed to return on Monday, insisting that he remained determined to vote.

Another voter, Francis Egwuibe, said he visited the collection centre as early as 8:30am but left after waiting beyond 9am without seeing any INEC official.

He explained that he returned in the afternoon, hoping to collect his PVC, only to discover that the officials had left.

While speaking to newsmen, Egwuibe questioned why electoral personnel could not remain at the centres throughout the announced collection period, considering the time and transportation costs incurred by voters.

He also called on INEC to properly educate its staff about their responsibilities, alleging that the situation raised concerns about the conduct of the exercise.

Similarly, a female voter, Chioma Njoku, accused the commission of treating prospective voters as though they had no value.

She warned that such experiences could discourage citizens who were willing to participate in the electoral process.

The affected voters called on INEC to improve its arrangements and ensure that eligible citizens could collect their PVCs without unnecessary difficulties.

When contacted, INEC’s spokesperson in Abia State, Victor Abraham, promised to respond after making the necessary enquiries.

Continue Reading

News

Many politicians Tinubu supported abandoned him in 2023 – APC Chairman Yilwatda 

info

Published

on

The National Chairman of the All Progressives Congress (APC), Prof. Nentawe Yilwatda, has said that many politicians whom President Bola Tinubu supported over the years withdrew their backing when he declared his intention to contest the presidency in 2023.

Yilwatda spoke on Friday at the party’s national secretariat in Abuja while welcoming members of opposition parties from Sokoto, Kaduna, Jigawa, Kano and Plateau states who defected to the APC.

He said Tinubu had supported several politicians from the North and South before seeking the presidency, but many of them abandoned him when he needed their support.

“President Bola Ahmed Tinubu has always supported northern politicians because he believes in the unity of Nigeria,” Yilwatda said.

Recommended

He cited Tinubu’s support for Atiku Abubakar in 2007, when the latter contested the presidency, and Nuhu Ribadu, who ran under the Action Congress of Nigeria in 2011.

Yilwatda also recalled Tinubu’s support for former President Muhammadu Buhari in 2015 and 2019.

“He has consistently worked to bring politicians together and promote unity across the country,” Yilwatda said.

According to him, Tinubu stood by Buhari even when some northern political leaders withdrew their support.

Yilwatda urged the new APC members to support Tinubu and his administration’s Renewed Hope Agenda, describing their defection as a sign of confidence in the President.

He also defended Tinubu’s performance in the North, listing the Abuja–Kaduna–Kano road, the Kano–Maiduguri road and rail projects among the infrastructure initiatives he said were being pursued by the Federal Government.

The APC chairman criticised opposition politicians for questioning Tinubu’s achievements in the region, insisting that the administration had invested in infrastructure across the country.

He also challenged opposition proposals, including a promised N500-per-litre fuel discount, arguing that the plan would cost about N20 trillion annually.

“How can you promise what you do not have when about 60 per cent of our oil production is tied to joint ventures, where the Federal Government owns only part of the production?” Yilwatda said.

He further accused former Vice-President Atiku Abubakar of selling public assets below their construction costs during the privatisation exercise.

Continue Reading

Trending