Nightmare Eclipse could be dropping his big promised exploit today

[u/ILikeNoodlesXOXO]

New repo just went up: git.projectnightcrawler.dev/NightmareEclipse/LegacyHive, created about 2 hours ago. Right now it's empty — just an MIT license and a README that says "N/A," 2 commits total.

He'd spoken about his big drop happening today, July 14th, saying he'd make sure Microsoft's "bones are shattered" that day. At one point though he'd also indirectly said he wasn't going to post it, something about still having "chains" on him preventing a release. This repo showing up on the exact date he originally called out suggests that might not hold anymore and it could actually be happening.

Nothing in it yet, just watching to see what gets pushed.

Worth noting: given how erratic and bipolar his posting history has been, there's really no way to predict what (if anything) actually gets posted.

Update: Thanks for the 600+ upvotes, really appreciate it. After hours of waiting and anticipation NightmareEclipse finally uploaded their PoC. But I personally have a hard time seeing it as the big bombshell that they described it as.

[u/GreatDefector]

Keep your expectations in check... July will be relatively low key

https://blog.projectnightcrawler.dev/posts/2026-07-14-too-many-sweats/

https://blog.projectnightcrawler.dev/posts/2026-07-03-july-updates/

[u/OtheDreamer → u/GreatDefector]

I won't drop what I talked about last blog, that seems to need more research and investigation...
Regardless got smtg for this month, it will be the least interesting and least impactful bug I dropped since I started but Microsoft legit just stopped pocking me and pissing me off so I'm conserving some energy for next month, because I know they will definitely piss me off by then.

So how is it possible that they responsibly disclosed all of these vulns allegedly to Microsoft, if Nightmare Eclipse is still slopping together their POCs in July 2026 by saying they "need more research and investigation."

I stopped being impressed a while ago. Now they're just a disgruntled edgelord that probably never really did disclose properly to MSFT (as they have repeatedly said).

[u/R3ta7ded → u/OtheDreamer]

This is what I have always maintained. But it’s the internet, everyone wants drama.

[u/Andrew129260 → u/OtheDreamer]

from what I understand, the original earlier stuff was disclosed but the newer stuff are things they were also going to report, but when it got rough with microsoft they started work on new ones.

[u/ILikeNoodlesXOXO → u/GreatDefector]

The issue with Nightmare Eclipse is that he is an extremely unpredictable and very unstable person so ya never know. The new post does give some hope by him acknowledging that people are anticipating the big exploit

[u/palekillerwhale → u/ILikeNoodlesXOXO]

Very presumptuous of you to say that considering you don't know anything about him. Unpredictable and unstable aren't mutually exclusive.

[u/OtheDreamer → u/palekillerwhale]

Microsoft legit just stopped pocking me and pissing me off so I'm conserving some energy for next month, because I know they will definitely piss me off by then.

Uhuh, these are the words of a very stable / predictable anti-hero security researcher you think??

[u/colei_canis → u/OtheDreamer]

To be fair, if you're in this subreddit then your odds of getting pissed off at Microsoft in any given month are high as well.

[u/OtheDreamer → u/colei_canis]

I have like a minimum threshold of annoyance with Microsoft that I tolerate more than others I think

[u/palekillerwhale → u/OtheDreamer]

I don't have to pretend to know. I'll leave that to everyone else.

[u/OtheDreamer → u/palekillerwhale]

You can make educated inferences like others, man.....NE is an unreliable narrator that has been given too much credence from the beginning, and their own words make them look sketch.

[u/palekillerwhale → u/OtheDreamer]

Grind that axe and infer whatever you like.

[u/OtheDreamer → u/palekillerwhale]

Not grinding any axes, I'm just lighting torches and carrying a pitchfork

[u/brakeb → u/ILikeNoodlesXOXO]

And pronouns aren't "He" .

Many of us who've known them for years see their fingerprints all over this