One Patch Behind: Nightmare-Eclipse's ShieldCrash and the Defender Bypass That Won't Stay Fixed
https://www.levelblue.com/blogs/spiderlabs-blog/one-patch-behind-nightmare-eclipses-shieldcrash-and-the-defender-bypass-that-wont-stay-fixed
Published: September 16, 2026 13:35
In our previous blog, we analyzed four proofs of concept (PoCs) from the leak persona Nightmare-Eclipse that targeted Kaspersky, Avast, NVIDIA, and CrowdStrike, respectively.
Expanding the Attack Surface: Analyzing Nightmare-Eclipse's Latest PoCs
https://www.levelblue.com/blogs/spiderlabs-blog/expanding-the-attack-surface-analyzing-nightmare-eclipses-latest-pocs
Published: September 9, 2026 12:37
In our previousĀ blog, we explored a series of disclosures from the leak persona Nightmare-Eclipse that focused heavily on Microsoft's ecosystem, including Windows Defender, Cloud Files, and core operating system functionality.
Still Circling: Inside the Operator Behind Blind Eagle's GitHub Loader
https://www.levelblue.com/blogs/spiderlabs-blog/still-circling-inside-the-operator-behind-blind-eagles-github-loader
Published: August 28, 2026 14:00
This is a collaborative follow-up to our original post, developed jointly with Emmanuel C., an independent security researcher not affiliated with LevelBlue, who contributed additional infrastructure and tooling findings based on an analysis of the sameā¦
Energy Disruption in UK Critical Infrastructure and the Growing OT Cyber Threat
https://www.levelblue.com/blogs/spiderlabs-blog/energy-disruption-in-uk-critical-infrastructure-and-the-growing-ot-cyber-threat
Published: August 25, 2026 15:27
A cyber incident affecting a small UK electricity generator in July 2026 resulted in several days of operational unavailability and triggered a government and NCSC response. UK authorities confirmed that the event posed no threat to the wider grid andā¦