#PrettyPrague
LightNews LightNews
getpokemon7.bsky.social
Chaotic EclipseがGenDigital Avast Antivirus ZeroDay PrettyPragueをリリース

セキュリティ研究者の Chaotic Eclipse（別名INFINITE NIGHTMARE、MSNightmare、Nightmare-Eclipse）が、GenDigital Avast Antivirusを標的とした新たなゼロデイ脆弱性を公開した。この脆弱性はPrettyPragueと名付けられ、権限昇格の欠陥を悪用する。

研究者は、Avast Antivirusを標的とした新たなゼロデイ脆弱性をアンチマルウェア製品で発見したと主張している...
Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague
Chaotic Eclipse released PrettyPrague, a PoC exploit for a GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability
securityaffairs.com
September 26, 2026 at 4:33 AM
campuscodi.risky.biz
After HardBrEacher, a zero-day in the Kaspersky EDR, Nightmare Eclipse has also published zero-days in Nvidia drivers (GreenSection) and the Avast antivirus (PrettyPrague)

github.com/MSNightmare/...

github.com/MSNightmare/...

github.com/MSNightmare/...
GitHub - MSNightmare/HardBreacher: Kaspersky Antivirus For Endpoint ZeroDay Elevation of Privileges Vulnerability
Kaspersky Antivirus For Endpoint ZeroDay Elevation of Privileges Vulnerability - MSNightmare/HardBreacher
github.com
September 1, 2026 at 7:38 AM
intelnightowl.bsky.social
Zero-day privilege-escalation exploit PrettyPrague released for Avast antivirus. #PrettyPrague #Avast #ZeroDay #PrivilegeEscalation https://securityaffairs.com/198243/hacking/chaotic-eclipse-releases-gendigital-avast-antivirus-zeroday-prettyprague.html
Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague
Chaotic Eclipse released PrettyPrague, a PoC exploit for a GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability
securityaffairs.com
September 2, 2026 at 4:51 AM
campuscodi.risky.biz
-Operation RepoGhost
-Report on TeamPCP unmasking
-New detections for that tiny mysterious backdoor
-SuperProxy evolves from proxy botnet to loader
-UNC3886's FireAnt campaign evolves
-Mirage Kitten targets fintech with new malware
-New GreenSection and PrettyPrague zero-days
September 2, 2026 at 7:39 AM
cyfar.ca
~Spiderlabs~
PoCs abuse security products to steal hashes, bypass UAC, evade detection, and gain SYSTEM access.
-
IOCs: \Device\NamedPipe\PRETTYPRAGUE, \Device\NamedPipe\FALCONFLANK, \\[.]\aswSnx
-
#ThreatActor #ThreatIntel #Windows
Nightmare-Eclipse PoCs
www.levelblue.com
September 9, 2026 at 4:12 PM
netsecio.bsky.social
Researcher 'Nightmare Eclipse' drops 3 LPE zero-day exploits for CrowdStrike Falcon, Avast Antivirus & Nvidia components. PoCs released for 'FalconFlank', 'PrettyPrague' & 'GreenSection' bugs, enabling SYSTEM-level access. #CyberSecurity #ZeroDay

🌐 cyber[.]netsecops[.]io
Researcher
Security researcher
cyber.netsecops.io
September 8, 2026 at 3:23 PM
hendryadrian.bsky.social
Nightmare Eclipse has disclosed three zero-days in Avast, CrowdStrike, and Nvidia products: PrettyPrague, FalconFlank, and GreenSection. The flaws target sandboxing, macro remediation, and Nvidia sharing. #Avast #CrowdStrike #Nvidia
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
Nightmare Eclipse has released three new zero-day exploits, PrettyPrague, FalconFlank, and GreenSection, targeting Avast, CrowdStrike, and Nvidia products. The researcher, who previously exposed Microsoft and Kaspersky flaws, now appears to be broadening focus across major security and hardware vendors. #NightmareEclipse #PrettyPrague #FalconFlank #GreenSection #Avast #CrowdStrike #Nvidia...
www.hendryadrian.com
September 7, 2026 at 4:00 PM
netsecio.bsky.social
Researcher 'Nightmare Eclipse' drops 3 LPE zero-day exploits for CrowdStrike Falcon, Avast Antivirus & Nvidia components. PoCs released for 'FalconFlank', 'PrettyPrague' & 'GreenSection' bugs, enabling SYSTEM-level access. #CyberSecurity #ZeroDay

🌐 cyber[.]netsecops[.]io
Researcher
Security researcher
cyber.netsecops.io
September 7, 2026 at 5:33 PM
threadlinqs.bsky.social
FalconFlank turns CrowdStrike Falcon's own macro cleanup into a free SYSTEM shell. https://intel.threadlinqs.com/threat/TL-2026-2330 #ThreatIntel #FalconFlank #HardBreacher #PrettyPrague
FalconFlank: Unpatched Local Privilege Escalation PoC in CrowdStrike Falcon Sensor via Office Macro Remediation
September 4, 2026 at 1:58 PM
neroqc.bsky.social
Chaotic Eclipse Claims Avast Antivirus 0-Day Vulnerability – PoC Released
cybersecuritynews.com/avast-antivi...
Chaotic Eclipse Claims Avast Antivirus 0-Day Vulnerability - PoC Released
Chaotic Eclipse claims an Avast Antivirus zero-day privilege-escalation flaw and released the PrettyPrague PoC.
cybersecuritynews.com
September 3, 2026 at 2:54 PM
hacker.at.thenote.app
Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague

Chaotic Eclipse released PrettyPrague, a PoC exploit for a GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNi…
#hackernews #news
Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague
Chaotic Eclipse released PrettyPrague, a PoC exploit for a GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a new zero-day exploit targeting GenDigital Avast Antivirus. The researcher named the exploit PrettyPrague, it triggers a privilege escalation flaw. The researcher claims to have found […]
securityaffairs.com
September 2, 2026 at 4:57 PM
blackhatnews.tokyo
PoC「PrettyPrague」、Avastアンチウイルスのゼロデイ脆弱性によるSYSTEM権限昇格を主張

PrettyPrategueと名付けられたプルーフ・オブ・コンセプト(PoC)エクスプロイトが公開され、Gen DigitalのAvastアンチウイルスに存在するとされるゼロデイ脆弱性を悪用することで、ローカルユーザーがWindowsのセキュリティアカウントマネージャー(SAM)データをダンプし、NT AUTHORI
PoC「PrettyPrague」、Avastアンチウイルスのゼロデイ脆弱性によるSYSTEM権限昇格を主張
PrettyPrategueと名付けられたプルーフ・オブ・コンセプト(PoC)エクスプロイトが公開され、Gen DigitalのAvastアンチウイルスに存在するとされるゼロデイ脆弱性を悪用することで、ローカルユーザーがWindowsのセキュリティアカウントマネージャー(SAM)データをダンプし、NT AUTHORI
blackhatnews.tokyo
September 3, 2026 at 8:30 AM
aimainainnu.bsky.social
PrettyPrague Zero-Day Exploit Hits Avast Antivirus - Cyber Kendra
www.cyberkendra.com/2026/08/pret...

Avastのウイルス対策ソフトを標的とした「PrettyPrague」ゼロデイエクスプロイトが確認される - Cyber​​ Kendra
PrettyPrague Zero-Day Exploit Hits Avast Antivirus
Chaotic Eclipse dropped PrettyPrague, an unpatched Avast Antivirus zero-day that dumps SAM and spawns a SYSTEM shell. No CVE, no fix.
www.cyberkendra.com
September 1, 2026 at 10:18 PM
toxy4ny.bsky.social
Tuesday fuck up - let's move on to antiviruses - PrettyPrague -
GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability. Another zeroday in an antimalware provider, I'm not sure but I believe this vulnerability affect other GenDigital products as well.
github.com/MSNightmare/...
GitHub - MSNightmare/PrettyPrague: GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability
GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability - MSNightmare/PrettyPrague
github.com
September 1, 2026 at 10:06 AM
threadlinqs.bsky.social
PoC hijacks Kaspersky's own UI process to plant a DLL straight into Windows System32 - no admin needed. https://intel.threadlinqs.com/threat/TL-2026-2258 #ThreatIntel #HardBreacher #SolidSnake #PrettyPrague
HardBreacher PoC Exploit Targets Kaspersky Endpoint Security Zero-Day for Windows 11 Local Privilege Escalation
August 31, 2026 at 1:42 PM
wdormann.infosec.exchange.ap.brid.gy
NightmareEclipse released a LPE exploit for Avast called PrettyPrague.

I couldn't get it to work though.
Windows 11 with Avast PrettyPrague.exe prints DeviceIoControl failed error : 5 and eventually hangs
August 30, 2026 at 6:54 PM