Precursor Intelligence

Threat News

Latest cyber threat intelligence, breaches and exploitation

2 matching stories

LPE
  • Threat Actor Activity18 Sept 2026·2 sources

    Nightmare-Eclipse releases ShieldBreak Windows LPE PoC for CVE-2026-62832

    The Nightmare-Eclipse actor published ShieldBreak, its tenth Windows LPE PoC, which abuses Cloud Files, Object Manager namespace, Defender API, and a remediation timing race to load a DLL from System32 and execute as SYSTEM.

    WindowsLPECVE-2026-62832+2
    Nightmare-Eclipse releases ShieldBreak Windows LPE PoC for CVE-2026-62832
  • Threat Actor Activity28 Aug 2026·2 sources

    Nightmare-Eclipse Discloses LegacyHive Windows LPE PoC

    The Nightmare-Eclipse persona has released LegacyHive, a local privilege escalation PoC for Windows User Profile Service that abuses offline registry manipulation, following the July 2026 Patch Tuesday.

    WindowsLPEPoC+2
    Nightmare-Eclipse Discloses LegacyHive Windows LPE PoC