The Hacker News: Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched

Incident Summary

Threat actors are actively exploiting security vulnerabilities in Microsoft Defender to obtain elevated system privileges. The report states that two of the flaws remained unpatched at the time it was published. This matters because privilege escalation can enable broader system compromise once an attacker has some access. Users and organizations relying on Microsoft Defender could be impacted. Limited public details are available in the provided signal, including no CVE identifiers or vendor remediation timeline.

Incident Details

Type

Data Breach

Severity

LOW

Status

ACTIVE

Date Occurred

April 17, 2026

External Sources

• https://thehackernews.com/2026/04/three-microsoft-defender-zero-days.html