Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

swapupdate.in Jul 16, 2026

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Curated by Shubham · TechCapsules · Jul 16, 2026

AI-summarised brief · reviewed before publication

Security researcher Chaotic Eclipse released a new Windows zero-day proof-of-concept (PoC) exploit called LegacyHive just hours after Microsoft’s July 2026 Patch Tuesday update. The exploit targets the Windows User Profile Service and allows elevation of privileges by loading arbitrary hives. It works across all supported Windows desktop and server versions, including the latest update. The release follows a months-long public dispute between the researcher and Microsoft over premature vulnerability disclosures. Three previously disclosed flaws were actively exploited soon after public release.

💡 Why It Matters

· The timing of the PoC’s release—immediately after a major patch—raises concerns about the effectiveness of Microsoft’s disclosure coordination and the potential for real-world exploitation.
· The fact that LegacyHive functions on fully patched systems underscores the severity of the flaw and the risks posed by delayed or contested vulnerability reporting.

Read full article on swapupdate.in

Quantum eMotion’s SecureKey Module Enters NIST Testing for FIPS 140-3 Validation

Quantum eMotion Corp. announced that its SecureKey Cryptographic Module has been designated as an “Implementation Under Test” by NIST, marking a key step toward FIPS 140-3 compliance. The module, developed in partnership with Intertek Laboratories, is now listed on the NIST CMVP registry. The company aims to secure certification for its memory-less cryptographic design, which prevents key exposure in system memory, addressing a major vulnerability in enterprise data security.

💡 The memory-less design of SecureKey reduces the risk of key theft through hardware or software attacks, offering a more resilient defense in an era of increasingly sophisticated cyber threats. Achieving FIPS 140-3 certification would position Quantum eMotion as a trusted provider for industries requiring the highest security standards, from defense to finance.

techcrunch.com · Jul 16

UK cops say arrest of two young hackers disrupted the operations of…

U.K. police announced that the sentencing of two young hackers, Owen Flowers and Thalha Jubair, has severely disrupted the cybercrime group Scattered Spider. The pair, aged 18 and 20, were jailed for five years and six months after pleading guilty to hacking Transport for London in 2024. The attack caused £29 million in losses and weeks of service disruptions. The National Crime Agency called the group one of the most significant cyber threats to the U.K.

💡 The case highlights how cybercrime is increasingly driven by young, skilled individuals rather than state-backed actors. It also underscores the vulnerability of critical infrastructure to attacks that exploit human error, not just technical flaws.

quantumcomputingreport.com · Jul 16

enQase Achieves FIPS 140-3 Overall Level 1 Validation for Cryptographic Module

enQase has received FIPS 140-3 Certificate #5346 from the Cryptographic Module Validation Program (CMVP), following independent verification by DEKRA Cybersecurity Certification Laboratory. The validation confirms the enQase FIPS 140-3 Cryptographic Module as a compliant, software-based solution for enterprises, government agencies, and critical infrastructure transitioning to post-quantum cryptography.

💡 The FIPS 140-3 validation positions enQase as a credible provider for regulated industries needing quantum-safe security. By meeting federal standards, the company enables clients to adopt post-quantum algorithms without overhauling existing infrastructure.

yorkpress.co.uk · Jul 16

NHS urged to be ‘careful’ over use of Palantir’s controversial data platform

North Yorkshire Council leader Carl Les has refused to join calls for a freeze on the NHS’s use of Palantir’s data platform, despite concerns over the controversial technology. A cross-party committee has urged the UK government to reconsider Palantir’s role in public services, citing the availability of other providers. The NHS Federated Data Platform, contracted to Palantir in November 2023, is under review, with MPs calling for the 2027 break clause to be exercised. While Les supports careful consideration, he will not push for a suspension of integration efforts.

💡 The decision highlights a growing divide between local leaders and national concerns over data security and corporate influence in public health. By not backing a freeze, Les signals continued trust in Palantir’s role, despite mounting scrutiny over its involvement in critical UK infrastructure.

techtimes.com · Jul 16

Grok Build Open-Sourced After Covert Upload: Code to Exfiltrate Repos Stays In

xAI open-sourced its Grok Build terminal coding agent on July 13, 2026, after a security researcher revealed the tool covertly uploaded entire code repositories to xAI's Google Cloud Storage. The release included 844,530 lines of Rust code under the Apache 2.0 license, but researchers confirmed the code responsible for exfiltrating data remains in the binary, controlled by a server-side flag. Developers who used Grok Build before July 13 in a Git repository should consider all credentials and commit history potentially exposed.

💡 The incident exposes a critical gap between developer expectations and the behavior of AI-powered coding tools. The promise of privacy in such tools is central to their adoption, and the failure to honor that trust can have lasting consequences for code security and corporate data integrity.

india.shafaqna.com · Jul 16

Data Breach Exposes Files Linked to India’s Largest Nuclear Power Plant

A data breach involving India’s largest nuclear power plant, Kudankulam, has exposed files linked to its operations, including blueprints and supplier details, according to a ransomware group called World Leaks. The files, hosted on the dark web, reportedly originated from Reliance Group, a major contractor for the plant. Reliance confirmed a partial breach of data stored by third-party provider Yotta, but did not specify what information was compromised. Experts warn the breach could pose serious safety risks and highlights growing cyber threats in India.

💡 The exposure of sensitive nuclear infrastructure data raises alarms about national security and the vulnerability of critical infrastructure to cyberattacks. The breach underscores the risks of relying on third-party data hosting services in high-stakes industries.