Post #1808989

April 28, 2026: The red sun still prevails. Not holding my breath for tomorrow, either. Interestingly enough, someone on Github remarked that BlueHammer and RedSun are essentially the same exploit primitive ("Defender blindly follows NTFS Junctions"), so they should be fixable in one big swoop. Alas, RedSun is not yet fixed. I'm also curious if MSRC (seemingly, I didn't scour each single one of the dozens of LPEs) didn't give it an own CVE on purpose or by mistake.