#nightmareeclipse
Gitlab have also kicked NightmareEclipse off their service. gitlab.com/nightmare-ec... cc @campuscodi.risky.biz
May 26, 2026 at 11:25 PM
Defender updates blocked by zero-day

NightmareEclipse released "BigDiskBuster," preventing Microsoft Defender from installing updates and leaving it stuck on old definitions. 🛡️

Users are caught in the ongoing public dispute between the researcher and Microsoft.
September 23, 2026 at 11:05 AM
Der IT-Forscher hinter dem „NightmareEclipse“-Projekt zeigt neue Lücken: „YellowKey“ in BitLocker und Rechteausweitung mit „MiniPlasma“. #Security
Windows-Sicherheitslücken: BitLocker-Problem und Rechteausweitung
Der IT-Forscher hinter dem „NightmareEclipse“-Projekt zeigt neue Lücken: „YellowKey“ in BitLocker und Rechteausweitung mit „MiniPlasma“.
www.heise.de
May 18, 2026 at 11:26 AM
NightmareEclipse has released another zero-day, this one targeting Microsoft Defender, and commenters suspect the researcher is a disgruntled former Microsoft Research contributor publishing PoCs without disclosure. An out-of-date EDR, as ever, is only marginally better than none.
NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
View post on Reddit.
reddit.com
September 23, 2026 at 4:42 PM
New from NightmareEclipse:
BigDiskBuster

If it's running, it prevents Defender updates from succeeding.
September 21, 2026 at 6:14 PM
May 29, 2026 at 4:58 PM
Patch for Windows Defender 0-day could allow attackers to fill hard disk
Patch for Windows Defender 0-day could allow attackers to fill hard disk
The feud between NightmareEclipse and Microsoft shows no signs of resolving soon.
arstechnica.com
July 10, 2026 at 2:15 AM
BigDiskBuster: The Zero-Day That Leaves Microsoft Defender Stuck on Stale Definitions
BigDiskBuster: The Zero-Day That Leaves Microsoft Defender Stuck on Stale Definitions
Researcher NightmareEclipse has released BigDiskBuster, a proof-of-concept that blocks Microsoft Defender updates by saturating disk space. No patch is available.
deafnews.it
September 22, 2026 at 11:07 PM
Die Identität von #NightmareEclipse und einige Hintergründe zu seinem Clinch mit #Microsoft wurden offen gelegt. Deckt sich mit meinen Informationen.

borncity.com/blog/2026/09...
Identität des Sicherheitsforschers Nightmare Eclipse gelüftet?
Ein Sicherheitsexperte, der unter dem Alias Nightmare Eclipse etc. auftritt, hat in den letzten Monaten ja einige 0-day-Schwachstellen samt Proof of Concepts zu Microsoft Schwachstellen veröffentlicht...
borncity.com
September 15, 2026 at 8:56 PM
NightmareEclipse is Abdelhamid Naceri, a former MSFT employee from Germany. I called it in April: echo "Abdelhamid Naceri"|sha256
7bc241eaf173d9d0728abecfb71706c04586a82d7eb743d946aea69899a54dc8
https://www.christopher-kunz.de/about-nightmare-eclipse/
About Nightmare Eclipse
Just in case they get uncovered eventually
www.christopher-kunz.de
September 16, 2026 at 12:32 PM
Windows Defender 0-Day Açığı: Disk Alanını Doldurma Riski ve Güncelleme Uyarısı
Windows Defender 0-Day Açığı: Disk Alanını Doldurma Riski ve Güncelleme Uyarısı
Güvenlik araştırmacısı NightmareEclipse ile Microsoft arasındaki gerilim, Windows Defender'da keşfedilen kritik bir 0-day açığıyla yeni bir boyut kazandı. Si…
teknovizor.com
July 9, 2026 at 9:25 PM
Da rappelt es: Das GitLab-Konto von #NightMareEclipse wurde auch gesperrt und #Microsoft schreibt, dass die "unkoordinierte" Offenlegung von Schwachstellen nicht toleriert werde. Öl ins Feuer gießen, wenn Deeskalation angesagt wäre?

borncity.com/blog/2026/05...
Nightmare Eclipse auf GitLab gebannt; Microsoft nimmt Stellung
Ein Sicherheitsforscher mit dem Alias Nightmare Eclipse (oder Chaotic Eclipse) veröffentlichte in den letzten 2 Monaten mehrere 0-Day-Schwachstellen mit Exploits. Nachdem das GitHub-Konto des…
borncity.com
May 28, 2026 at 9:48 AM
Microsoft, Windows Defender'daki 0-day açığını yamaladı. NightmareEclipse ile Microsoft arasındaki gerilim sürerken, bu açık saldırganların sabit diski verilerle doldurmasına olanak tanıyordu. Güncellemeyi hemen yapın!
July 9, 2026 at 9:55 PM
A new repo by Nightmare Eclipse is live, hinting at a delayed exploit promised to "shatter Microsoft's bones." Created today, it's empty with a vague README. Despite his erratic past, there's anticipation around potential updates. Six hours in, no further activity observed.
Nightmare Eclipse could be dropping his big promised exploit today
New repo just went up: git.projectnightcrawler.dev/NightmareEclipse/LegacyHive, created about 2 hours ago. Right now it's empty — just an MIT license and a README that says "N/A," 2 commits total. ...
reddit.com
July 14, 2026 at 11:42 AM
Microsoft fix for Defender zero-day draws fresh criticism from security researcher 'NightmareEclipse,' who says the mitigation can exhaust disk space, crash apps
www.databreachtoday.com/microsoft-fi...
www.databreachtoday.com
July 13, 2026 at 1:28 PM
This is a zero-day bug being exploited so Microsoft has not patched the issue yet. Admins need to be on the lookout for a fix from Microsoft and apply it ASAP. #NightmareEclipse #Exploit
NightmareEclipse strikes again at Windows 11 exploit with ShieldBreak proof of concept
This is a zero-day bug being exploited so Microsoft has not patched the issue yet. Admins need to be on the lookout for a fix from Microsoft and apply it ASAP.
www.neowin.net
August 13, 2026 at 10:48 AM
🗞 Дослідник NightmareEclipse стверджує, що оновлення Microsoft Defender можна використати для заповнення диска даними. Microsoft проблему ще не підтвердила.

https://t.co/z8WLdHUo9M
Патч Microsoft Defender дозволяє зловмисникам повністю "забити" диск даними
mezha.ua
July 10, 2026 at 1:11 PM
Defenderを完全突破する新手法「ShieldBreak」が登場。Windows 11 25H2が標的に
Defenderを完全突破する新手法「ShieldBreak」が登場。Windows 11 25H2が標的に | ソフトアンテナ
Windows 11を標的とした最新のゼロデイ攻撃「ShieldBreak」のPoC(概念実証)を、セキュリティ研究者NightmareEclipse氏が公開しました。 Microsoftが8月の月例更新プログラムで修正を行ったばかりの脆弱
softantenna.com
August 15, 2026 at 11:20 PM
Microsoft is taking legal action against researcher Nightmare Eclipse for publicly disclosing unpatched Windows zero-days, citing alleged mistreatment by MSRC. This isn't just about a bug; it's a critical moment for…

https://www.tpp.blog/1z948l4

#cybersecurity #microsoft #nightmareeclipse
May 31, 2026 at 10:14 AM
Patch for Windows Defender 0-day could allow attackers to fill hard disk
Patch for Windows Defender 0-day could allow attackers to fill hard disk
The feud between NightmareEclipse and Microsoft shows no signs of resolving soon.
arstechnica.com
July 9, 2026 at 10:40 PM
Patch for #Windows Defender 0-day could allow attackers to fill hard disk
Patch for Windows Defender 0-day could allow attackers to fill hard disk
The feud between NightmareEclipse and Microsoft shows no signs of resolving soon.
arstechnica.com
July 9, 2026 at 10:30 PM