Researcher Publishes BigDiskBuster Zero-Day Proof-of-Concept to Disrupt Microsoft Defender Updates

A zero-day proof-of-concept tool named BigDiskBuster has been released that disrupts Microsoft Defender updates by filling disk space, with no official patch or CVE identifier available. The exploit leverages disk space exhaustion to block update mechanisms, raising concerns about endpoint security resilience.

A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19.

The tool, called BigDiskBuster, has no patch, no CVE, and no Microsoft advisory. Its author, Abdelhamid Naceri, is a former Microsoft security researcher whose earlier Defender exploits were used in

Read original article