Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIMicrosoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development
Microsoft has officially acknowledged a zero-day vulnerability in Microsoft Defender, designated CVE-2026-50656 with a CVSS score of 7.8. The flaw, codenamed RoguePlanet, is a privilege escalation vulnerability affecting the Microsoft Malware Protection Engine, and Microsoft is actively developing a patch to address it.
AIShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities
The ShinyHunters cybercrime group exploited a zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft between May 27 and June 9 to breach enterprise systems, primarily targeting universities. The attacks involved data theft and extortion demands, with Oracle not releasing a security advisory until June 10, after the exploitation window had closed.
AIMicrosoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows
Security researcher Chaotic Eclipse has disclosed a zero-day vulnerability in Microsoft Defender called RoguePlanet that exploits a race condition to grant SYSTEM-level access on fully updated Windows systems. The proof-of-concept exploit has been published on GitHub, with the researcher claiming a 100% success rate under certain conditions. This represents a critical privilege escalation vulnerab
AICheck Point VPN Flaw Exploited Since Early May
A critical zero-day vulnerability in Check Point VPN has been actively exploited since early May, with attackers leveraging the flaw to gain unauthorized access. At least one attack has been attributed to a Qilin ransomware affiliate, highlighting the severity of the threat to enterprise networks.