Disgruntled researcher leaks Windows zero-day security flaw affecting Microsoft

On 2026-04-07, a researcher using the alias Chaotic Eclipse reportedly leaked exploit code for a Windows zero-day vulnerability called BlueHammer. The flaw is described as a local privilege escalation issue that can grant SYSTEM or elevated admin rights on affected endpoints. The leak affects Microsoft Windows and raises cyber risk by enabling easier exploitation of the bug.