Cybercriminals have begun exploiting newly exposed vulnerabilities in Microsoft Windows, gaining unauthorized access to at least one organization, according to cybersecurity firm Huntress.

As reported by LumenCodes, attackers are leveraging three security flaws—BlueHammer, UnDefend, and RedSun—recently disclosed online. Among these, only BlueHammer has been patched so far by Microsoft, leaving the others still vulnerable to exploitation.

How the Attacks Are Happening

The exploits appear to rely on publicly available code released by a researcher known as Chaotic Eclipse. The researcher shared proof-of-concept exploit code for all three vulnerabilities, reportedly following a dispute with Microsoft.

All three flaws impact Windows Defender, allowing attackers to escalate privileges and potentially gain full administrative control over affected systems.

The Risk of Full Disclosure

This situation highlights a controversial practice in cybersecurity known as “full disclosure,” where vulnerabilities—and sometimes working exploit code—are released publicly before vendors can patch them.

While this can pressure companies to act faster, it also opens the door for malicious actors to weaponize the information almost immediately.

Security experts warn that once such tools are publicly accessible, attackers can deploy them at scale with minimal effort, putting defenders in a reactive position.

A Race Against Time

Researchers at Huntress say this has created a high-stakes race between attackers and defenders. With ready-made exploit tools circulating online, organizations must act quickly to secure their systems before being targeted.

Although Microsoft has issued a fix for BlueHammer, the remaining vulnerabilities still pose a serious threat until patches are released and widely applied.

The Bigger Picture

Incidents like this underline a persistent challenge in cybersecurity: balancing transparency with safety. When communication between researchers and companies breaks down, the consequences can escalate quickly—turning vulnerabilities into active attack vectors almost overnight.

For organizations relying on Windows systems, this serves as a reminder to apply updates promptly, monitor unusual activity, and stay alert to emerging threats in an increasingly fast-moving security landscape.