2 Microsoft Defender Zero Days Exploited In The Wild

Wordfence Security News Clip | May 25, 2026

Two Microsoft Defender zero-days, CVE-2026-41091 and CVE-2026-45498, are under active exploitation in the wild.

Verify Defender Anti-Malware Platform 4.18.26040.7 and Malware Protection Engine 1.1.26040.8 are installed on all Windows systems.

Watch The Clip: https://www.youtube.com/watch?v=ZqEKj4Y2gVM

Two Microsoft Defender Zero Days Exploited

Wordfence Security News Clip | May 25, 2026

Two Microsoft Defender zero-days, CVE-2026-41091 and CVE-2026-45498, are actively exploited in the wild.

Attackers chain BlueHammer, Red Sun, and Undefend to gain system-level access then block Defender signature updates.

Verify Defender Anti-Malware Platform 4.18.26040.7 and Malware Protection Engine 1.1.26040.8 are installed.

Watch The Clip: https://youtube.com/shorts/d2ubcB3DiXw

**Geopolitical:** The U.S. House passed legislation providing aid to Ukraine and imposing new sanctions on Russia. Middle East tensions remain high, with Iran linking any peace deal to the resolution of the Lebanon conflict and the release of frozen assets.

**Technology:** President Trump signed an executive order on AI in the national security enterprise, focusing on cybersecurity. SpaceX's $1.8 trillion IPO is anticipated by June 12. NASA successfully demonstrated multi-network communication for spacecraft.

**Cybersecurity:** Cisco issued a warning regarding an actively exploited zero-day vulnerability (CVE-2026-20245) in its Catalyst SD-WAN, for which no patch is currently available. CISA added a critical Magento RCE flaw (CVE-2026-45247) to its KEV catalog, with federal agencies mandated to apply fixes by June 6, 2026.

#Cybersecurity #Geopolitics #AI