Security · 1h ago
Ransomware Gangs Exploit Windows BlueHammer Flaw, CISA Warns
CISA confirmed ransomware gangs are actively exploiting the Windows Defender privilege escalation vulnerability known as BlueHammer. The flaw, previously used in zero-day attacks, allows attackers to gain elevated system access. Microsoft has released a patch, but unpatched systems remain at risk.
Meridian48 take
The real story isn't just another vulnerability—it's that ransomware groups are now weaponizing a privilege escalation bug that was already being used in targeted attacks, signaling a shift in their tactics.
Read the full reporting
CISA: Windows BlueHammer flaw now exploited by ransomware gangs →
Bleeping Computer
cisa-warningransomware-exploit