Cybersecurity firm Huntress has confirmed that hackers are already exploiting newly exposed Windows vulnerabilities after a researcher publicly released attack code online. The flaws, known as BlueHammer, UnDefend, and RedSun, all impact Windows Defender and can give attackers high-level system access.

The exploit code was published by a researcher called Chaotic Eclipse following a dispute with Microsoft. While Microsoft has patched BlueHammer, the other vulnerabilities remain unpatched, increasing the risk. Because the attack tools are publicly available, cybercriminals can easily weaponize them, turning what would normally be complex exploits into plug-and-play threats.