Microsoft Defender Vulnerability Allows Bypass of Authentication and Malicious File Uploads

According to PANews, a significant vulnerability has been identified in Microsoft Defender, allowing attackers to bypass authentication and upload malicious files. The flaw was discovered in the network communication between Microsoft Defender for Endpoint (DFE) and its cloud services. This vulnerability enables attackers, once they have infiltrated a system, to bypass authentication, forge data, leak sensitive information, and even upload malicious files into investigation packages. The issue was highlighted in a post shared by 23pds, the Chief Information Security Officer at SlowMist Technology.