Post

https://scq.ms/redsun-1 The RedSun zero-day in Microsoft Defender grants attackers full SYSTEM access on Windows 10, 11, and Servers—even after April patches. Exploiting cloud-tagged file handling, it overwrites critical system files via Cloud Files API and NTFS junctions.

scq.msSecQube - Technical steps to mitigate RedSun zero-day in Windows Defender for enterprise SOC teamsTechnical steps to mitigate RedSun zero-day in Windows Defender for enterprise SOC teams

0 reposts0 likes

No replies yet.