New "ShieldBreak" Exploit Bypasses Microsoft Defender Patch, Turning Defender into Attack Vector

A public exploit named "ShieldBreak" (CVE-2026-69414) has been released, effectively bypassing Microsoft's July patch for a Windows Defender race condition (CVE-2026-50656). The exploit is notable for using Defender itself as the mechanism for local privilege escalation, affecting Windows 11 25H2 and Windows Server 2025 with a claimed 100% success rate. Microsoft is currently investigating and has not yet shipped a fix.