Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass dubbed GreatXML, a day after they published an exploit for Microsoft Defender.

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass dubbed GreatXML, a day after they published an exploit for Microsoft Defender.

Security researcher Nightmare Eclipse has released a new Windows BitLocker bypass, only one day after publishing an exploit targeting Microsoft Defender. Named GreatXML, the fresh exploit allows users ...

Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM. A security researcher has released another zero-day exploit targeting Microsoft’s Windows ...

LayerZero Labs just confirmed it. Roughly $292 million in rsETH was stolen from the KelpDAO bridge after attackers went after the RPC infrastructure — the layer that sits underneath the network’s ...

LayerZero Labs has released its incident report on the KelpDAO bridge attack, saying about $292 million in rsETH was stolen after attackers poisoned RPC infrastructure used by its verification network ...

LayerZero, a cross-chain messaging protocol, has publicly apologized for its handling of communications following a major security incident involving Kelp DAO. In a detailed update released on its ...

Almost 3 weeks ago, the KelpDAO bridge exploit began as a technical failure and quickly became a wider test of cross-chain security, protocol defaults, and accountability across decentralised finance.

What Did LayerZero Admit About the Kelp DAO Exploit? LayerZero issued a public apology Friday over its handling of the April 18 exploit that drained roughly $292 million in rsETH from Kelp DAO’s cross ...

KelpDAO says LayerZero’s own DVN infrastructure was breached on April 18, causing over $300M in DeFi losses. Independent researchers confirmed the attack originated ...

An unpatched vulnerability can allow for privilege escalation across Windows systems through the abuse of the Remote Procedure Call (RPC) architecture in Microsoft's OS. Called PhantomRPC, the flaw ...

Chainalysis noted that on April 18, 2026, cybercriminals believed to be tied to North Korea’s Lazarus Group executed one of the largest DeFi heists of the year, siphoning approximately $292 million ...