Offensive Security Digest

Windows zero-days: RoguePlanet (Defender) and WinRE/BitLocker trust bypass with PoCs

Windows zero-days: RoguePlanet (Defender) and WinRE/BitLocker trust bypass with PoCs

Key Questions

What are the Windows zero-days mentioned in recent reports?

Two zero-days with public PoCs have been disclosed: RoguePlanet targeting Windows Defender and another affecting WinRE/BitLocker trust boundaries. Both are relevant for Windows exploitation research.

Who disclosed the RoguePlanet and WinRE/BitLocker zero-days?

Researcher Nightmare Eclipse publicly shared details on these zero-days. The disclosures include PoCs suitable for red teaming and defensive testing.

Why are these zero-days important for red teaming?

They provide fresh attack surfaces against Defender and BitLocker protections with available proof-of-concept code. Teams can use them to simulate realistic Windows exploitation scenarios.

Two fresh zero-days with public PoCs. RoguePlanet hits Defender, another targets WinRE/BitLocker trust. Must-share for Windows exploitation and red teaming.

Sources (1)
Updated Jun 16, 2026
What are the Windows zero-days mentioned in recent reports? - Offensive Security Digest | NBot | nbot.ai