Hackers are actively exploiting unpatched Windows Defender vulnerabilities to break into organisations, according to new security research.
The attacks centre on three flaws in Microsoft Defender that can give attackers administrator-level access to a Windows machine. A researcher known as Chaotic Eclipse published exploit code for the bugs online earlier this month, followed by tools called UnDefend and RedSun, making it easier for attackers to use the vulnerabilities in real-world attacks.
The flaws affect how Windows Defender handles protections on a device, allowing hackers to bypass safeguards and gain SYSTEM-level control. Once attackers have that level of access, they can install malware, steal credentials, move through networks, or disable security tools altogether.
The situation highlights a growing problem for organisations that delay software updates. A vulnerability is dangerous on its own, but the risk rises sharply once public exploit code appears online. At that point, attackers no longer need to discover weaknesses themselves — they can simply download working tools and begin targeting businesses.
Security experts say the case also exposes wider frustration with Microsoft’s vulnerability response process. Chaotic Eclipse claimed the exploit was released publicly after failed attempts to get Microsoft’s attention, while some researchers criticised the company’s security team for moving too slowly. Microsoft later patched the flaw in its April 14 Windows 11 update, although reports suggest some vulnerable code may remain.
The warning arrives as cyberattacks become more aggressive across Europe and the US. Governments and businesses are already dealing with ransomware, infrastructure attacks, data breaches, and targeted espionage campaigns. A single unpatched Windows machine can quickly become an entry point into a wider network.
For businesses, the lesson is straightforward: patching delays are becoming more expensive than downtime. Once working exploit code becomes public, attackers move quickly.
Author: George Nathan Dulnuan