← Back to Feed

New Windows Defender zero-day blocks Microsoft antivirus updates

September 22, 2026 · BleepingComputer · Severity: CRITICAL

Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released another Microsoft Defender zero-day exploit that blocks antivirus updates.

Key Takeaways

  • A new Windows Defender zero-day has been discovered that blocks Microsoft antivirus updates, effectively disabling critical security coverage on affected Windows systems.
  • The vulnerability weaponizes Windows Defender itself to prevent security updates, creating a catch-22 where the security tool becomes the vector for maintaining an unpatched state.
  • Windows administrators should verify that Defender definitions and engine updates are installing correctly and apply workarounds if the update blocking behavior is observed.
☕ Buy a Coffee