Saint RedSun, Who Rose After the Hammer

Patron of symbolic links, disputed fixes, and researchers who keep their promises.

Life

On 15 April 2026, days after the BlueHammer fix, the same researcher signing as Chaotic Eclipse published RedSun, along with another pointed letter to the Microsoft Security Response Center. Once again the flaw lay in Microsoft Defender: by following file system links without due care, it let a local user gain elevated privileges. Microsoft tracked it as CVE-2026-41091, and CISA marked it as exploited.

Prayer

O Saint RedSun, rising red over Defender's horizon, let our services look where a link leads before following it. Amen.

How to celebrate

Celebrated by updating Defender once more and checking that privileged services don't follow links written by others.

Red sun at night, patch in sight.