Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive.

It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as ProfSvc, is a core system component that manages user accounts and environments.

“The PoC requires another standard user credential and a third username (which can be an administrator account),” Chaotic Eclipse said. “If the PoC is successful, it will end up mounting the target user hive in the current user classes root.”

Read more: thehackernews.com

Henderson Nevada

Datacenter

Governor approves tax breaks for Google data center in Henderson

State of Nevada Governor Paul Anderson has approved $25.2 million in tax breaks for a data center project in Henderson, Nevada, which we now know

Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

Security

Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

Security

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. The vulnerabilities are listed