A security researcher has published details of a new Windows zero-day vulnerability after Microsoft threatened legal action, according to techcrunch.com. The report, published Wednesday, August 12, 2026, indicates the researcher went ahead with the disclosure despite the company’s warning.
TechCrunch reports that the move follows a pattern of escalating tension between the researcher and Microsoft. The newly disclosed bug is separate from previous issues but continues a series of public disclosures tied to the same individual.
According to Cybernews, the researcher has also targeted Microsoft Defender, abusing the antivirus tool to gain System privileges again. The outlet described the action as “unfixing” Microsoft’s previous patch, suggesting the researcher found a way around a fix the company had already issued. BleepingComputer has labeled this specific issue “ShieldBreak,” a zero-day vulnerability that grants SYSTEM-level privileges on Windows systems.
The three outlets—TechCrunch, Cybernews, and BleepingComputer—all covered the story on the same day, confirming the researcher’s publication of the flaw despite the legal threat. The exact nature of Microsoft’s legal action, including whether it involved a cease-and-desist letter or a formal lawsuit, has not been detailed in the available reporting.
The vulnerability appears to affect Windows and Microsoft Defender, with the researcher demonstrating a method to escalate privileges to the highest level on the operating system. SYSTEM privileges allow full control over a Windows machine, making the flaw significant for enterprise and consumer users alike.
What to watch next: whether Microsoft responds with an emergency patch or escalates its legal efforts against the researcher.
