The Patching Friars' AlmanacA calendar of CVE saints

April 2

BlueHammerHoly card for bluehammer, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 BlueHammer MALLEUS CUSTODIS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint BlueHammer, the Hammer on the Guardian

Patron of over-privileged antivirus, disclosures without warning, and guardians who need guardians.

Life

On 2 April 2026 a researcher signing as Chaotic Eclipse published BlueHammer on GitHub, in open dispute with the Microsoft Security Response Center and without waiting for a fix. The flaw lay in Microsoft Defender, the very program meant to protect Windows: a local user could use it to gain elevated privileges. Microsoft fixed it as CVE-2026-33825, and CISA listed it as exploited in the wild, ransomware campaigns included.

Prayer

O Saint BlueHammer, who strikes with the guardian's own hammer, let those who defend us never become the front door. Amen.

How to celebrate

Celebrated by checking that the Defender antimalware platform really did update, rather than taking its word for it.

Whoever guards the castle holds the key to every room.

Technical record

Disclosed on
April 2 2026
CVE
CVE-2026-33825
CVSS
7.8Actively exploited (CISA KEV)
Product
Microsoft · Microsoft Defender Antimalware Platform

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Sources: deadeclipse666.blogspot.com · github.com · msrc.microsoft.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.