#detection-evasion

Analysis · May 1, 2026 · Colten Anderson

Windows Defender is the attack surface now, and two of the three exploits don't have patches

Three tools dropped in April turn Defender's own privileged operations into privilege escalation and detection evasion. Microsoft patched one. The other two work on fully patched systems.