About a month ago, the anonymous security researcher Nightmare Eclipse published information about RoguePlanet, a zero-day vulnerability in Microsoft’s Defender security software. The vulnerability, officially designated CVE-2026-50656, can be exploited by hackers to gain full access to your computer.
BleepingComputer reports that Microsoft has released a security fix for RoguePlanet via an update to the Malware Protection Engine (the core scanning engine on which Microsoft’s security solutions and services are based). You’ll receive the patch automatically via Windows Update.
“Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-50656. Please see the FAQ for more information on how to check if the new version has been installed,” Microsoft wrote on this support page.
Recently, the same security researcher shared information about a wide range of security vulnerabilities in Windows, including BlueHammer, RedSun, MiniPlasma, YellowKey, and more.
Further reading: Microsoft Defender settings I always change ASAP
Related posts:
North Korean hackers exploited Chrome zero-day to steal crypto
Hackers can bypass Microsoft Defender to install ransomware on PCs
CISA urges companies to secure Microsoft Intune systems after hackers mass-wipe Stryker devices
Russian government hackers broke into thousands of home routers to steal passwords