--- title: ShieldBreak defeats Defender's patch, LiteLLM's... description: A researcher's ShieldBreak exploit fully bypasses Microsoft's fix for CVE-2026-50656, restoring SYSTEM access on fully patched Defender installs with no... canonical: https://daily.dev/posts/shieldbreak-defeats-defender-s-patch-litellm-s-40-minute-pypi-window-burns-2-500-companies-gedsooc8c twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: ShieldBreak defeats Defender's patch, LiteLLM's 40-minute PyPI window burns 2,500 companies | daily.dev og:description: A researcher's ShieldBreak exploit fully bypasses Microsoft's fix for CVE-2026-50656, restoring SYSTEM access on fully patched Defender installs with no... og:url: https://daily.dev/posts/shieldbreak-defeats-defender-s-patch-litellm-s-40-minute-pypi-window-burns-2-500-companies-gedsooc8c og:image: https://api.daily.dev/og/posts/GeDsOOC8C.png og:image:alt: ShieldBreak defeats Defender's patch, LiteLLM's 40-minute PyPI window burns 2,500 companies og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # ShieldBreak defeats Defender's patch, LiteLLM's 40-minute PyPI window burns 2,500 companies **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary A researcher's ShieldBreak exploit fully bypasses Microsoft's fix for CVE-2026-50656, restoring SYSTEM access on fully patched Defender installs with no counter-patch in sight. A supply-chain attack that started with a compromised Trivy scanner spread through LiteLLM's CI pipeline, and two malicious PyPI packages live for just 40 minutes ended up leaking 195TB of credentials across 2,500 companies and 434,000 CI/CD pipelines. Adobe Commerce and SharePoint both have actively exploited critical flaws right now, and a quiet guest-portal scraping campaign has been pulling data from Salesforce and ServiceNow sites since March 2025. Black Hat's real takeaway this year wasn't a new tool, it was that nobody trusts MTTR anymore now that AI-assisted exploitation moves faster than detection loops. ## Content **TLDR:** A researcher's ShieldBreak exploit fully bypasses Microsoft's fix for CVE-2026-50656, restoring SYSTEM access on fully patched Defender installs with no counter-patch in sight. A supply-chain attack that started with a compromised Trivy scanner spread through LiteLLM's CI pipeline, and two malicious PyPI packages live for just 40 minutes ended up leaking 195TB of credentials across 2,500 companies and 434,000 CI/CD pipelines. Adobe Commerce and SharePoint both have actively exploited critical flaws right now, and a quiet guest-portal scraping campaign has been pulling data from Salesforce and ServiceNow sites since March 2025. Black Hat's real takeaway this year wasn't a new tool, it was that nobody trusts MTTR anymore now that AI-assisted exploitation moves faster than detection loops. --- ## ShieldBreak exploit fully defeats Microsoft's Defender patch, no fix available Researcher Nightmare Eclipse released ShieldBreak, a working bypass of the patch for CVE-2026-50656 (RoguePlanet) that lets a low-privilege local user jump straight to SYSTEM on fully updated machines. Independent researcher Will Dormann confirmed a 100% success rate against Windows 10, 11 25H2/Canary, and Server 2025. This is the latest in a running string of Defender bugs from the same researcher since April, several still unpatched, following a messy back-and-forth where Microsoft threatened legal action over the disclosures and never retracted it. Until there's a real fix, stack mitigations: verify patches actually applied, tighten local admin rights, enable ASR rules and Tamper Protection, and watch for MsMpEng.exe spawning shells. [Read more](https://daily.dev/feed-by-ids?id=3WT78onV0&id=30Gt7SySK) ## LiteLLM supply-chain attack: 40 minutes on PyPI, 195TB of leaked credentials, 2,500 companies A compromise that started with Aqua Security's Trivy scanner and its GitHub Actions spread into LiteLLM's CI pipeline, putting two malicious packages on PyPI for about 40 minutes. In that window, malware harvested cloud keys, SSH keys, Kubernetes secrets, and AI provider tokens from roughly 434,000 CI/CD pipelines, landing in a single 195TB file affecting Microsoft, Amazon, Cisco, Nvidia, and dozens of other major companies. The same group, calling itself TeamPCP and reportedly made up largely of teenagers, also hit Checkmarx's KICS and the Telnyx Python SDK; the FBI says to treat any touched credentials as permanently burned and rotate them regardless of whether the packages were pulled. [Read more](https://daily.dev/posts/p7E2Oa9lG) ## Adobe Commerce account takeover and SharePoint bypass both under active exploitation CVE-2026-71362, an incorrect-authorization flaw in Adobe Commerce and Magento, lets attackers hijack any customer session with no authentication or user interaction; Sansec's WAF is already blocking live exploitation attempts despite Adobe initially saying it had no knowledge of in-the-wild attacks. Separately, a PoC for CVE-2026-55040, the SharePoint JWT auth bypass Microsoft patched in July, was weaponized against honeypots within a day of Rapid7 publishing the writeup, and over 8,500 SharePoint servers are still exposed. Patch both now if you haven't. [Read more](https://daily.dev/feed-by-ids?id=Cke5DSk3l&id=poikstDJk) ## City-Forum has quietly scraped Salesforce and ServiceNow guest portals since March 2025 SaaS security firm Reco tracked a data-theft campaign, named City-Forum after its domain, running from a single IP address for over a year with no exploit involved. It just abuses overly permissive guest-user sharing rules that admins forgot were left open, hitting undocumented endpoints like older Salesforce Aura APIs and a ServiceNow Service Portal search endpoint. One target alone logged over 560,000 attacker events. Fixes require no patch, just going back through guest sharing rules and API access nobody's reviewed in years. [Read more](https://daily.dev/posts/myZkH41dW) --- ## Also notable - **WindRelay NFC relay malware drains bank accounts in 13-minute phone calls:** Group-IB documented Android malware combining SpyNote RAT with WindRelay to relay live NFC card taps to attacker payment terminals, completing loan fraud and card theft in a single 13-minute vishing call, mostly targeting Czechia, Slovakia, and Slovenia. [Read more](https://daily.dev/posts/ZKhG3khEJ) - **Microsoft's bug bounty program paid out $20M+ to 562 researchers this year:** That's up from $17M to 344 researchers last year, with the Zero Day Quest event alone contributing $2.3M, and the program now also covers open-source and third-party components. [Read more](https://daily.dev/posts/aIEiqC3Qs) - **Zbtlink routers ship with a factory backdoor opening unauthenticated root shells:** VulnCheck found ENDLESSDOORS baked into at least 20 Zbtlink router models, beaconing to Chinese C2 every 35 seconds with no authentication and granting a full root shell to anyone who can hijack the DNS resolution for its C2 domains. [Read more](https://daily.dev/posts/cmaghDgXi) - **Homebrew's leaked Jenkins token had push access to core repos, but was never used:** A researcher found a leaked GitHub PAT with push rights to Homebrew/brew and homebrew-core; GitHub confirmed it was never exploited, and Homebrew revoked it, restricted direct pushes to master, and asked maintainers to prune old PATs. [Read more](https://daily.dev/posts/fS6uj8YXW) - **KASS turns smart-contract vulnerability findings into working exploits 94% of the time:** Using GPT-5.1 on 104 SmartBugs-Curated contracts, the KASS agent pipeline generated executable Solidity/Foundry PoCs for 94.23% of cases, though success drops to 22.4% without its internal code-repair retry loop. [Read more](https://daily.dev/posts/6dIniHaQV) ## Similar posts on daily.dev - [What the LiteLLM Breach Teaches Us About Securing LLM Gateways](https://daily.dev/posts/what-the-litellm-breach-teaches-us-about-securing-llm-gateways-ysbbrmwzu) · Medium · 0 upvotes · 0 comments - [Researcher creates workaround for Microsoft Defender security patch](https://daily.dev/posts/researcher-creates-workaround-for-microsoft-defender-security-patch-30gt7sysk) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#python](https://daily.dev/tags/python), [#cicd](https://daily.dev/tags/cicd) [View this post on daily.dev](https://daily.dev/posts/shieldbreak-defeats-defender-s-patch-litellm-s-40-minute-pypi-window-burns-2-500-companies-gedsooc8c) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/shieldbreak-defeats-defender-s-patch-litellm-s-40-minute-pypi-window-burns-2-500-companies-gedsooc8c","headline":"ShieldBreak defeats Defender's patch, LiteLLM's 40-minute PyPI window burns 2,500 companies","text":"A researcher's ShieldBreak exploit fully bypasses Microsoft's fix for CVE-2026-50656, restoring SYSTEM access on fully patched Defender installs with no counter-patch in sight. A supply-chain attack that started with a compromised Trivy scanner spread through LiteLLM's CI pipeline, and two malicious PyPI packages live for just 40 minutes ended up leaking 195TB of credentials across 2,500 companies and 434,000 CI/CD pipelines. Adobe Commerce and SharePoint both have actively exploited critical flaws right now, and a quiet guest-portal scraping campaign has been pulling data from Salesforce and ServiceNow sites since March 2025. Black Hat's real takeaway this year wasn't a new tool, it was that nobody trusts MTTR anymore now that AI-assisted exploitation moves faster than detection loops.","url":"https://daily.dev/posts/shieldbreak-defeats-defender-s-patch-litellm-s-40-minute-pypi-window-burns-2-500-companies-gedsooc8c","datePublished":"2026-08-13T04:18:10.919Z","dateModified":"2026-08-13T04:18:35.500Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"ShieldBreak defeats Defender's patch, LiteLLM's 40-minute PyPI window burns 2,500 companies"}]} ```