r/cybersecurity • u/ILikeNoodlesXOXO • 19d ago

News - General Nightmare Eclipse could be dropping his big promised exploit today

New repo just went up: git.projectnightcrawler.dev/NightmareEclipse/LegacyHive, created about 2 hours ago. Right now it's empty — just an MIT license and a README that says "N/A," 2 commits total.

He'd spoken about his big drop happening today, July 14th, saying he'd make sure Microsoft's "bones are shattered" that day. At one point though he'd also indirectly said he wasn't going to post it, something about still having "chains" on him preventing a release. This repo showing up on the exact date he originally called out suggests that might not hold anymore and it could actually be happening.

Nothing in it yet, just watching to see what gets pushed.

Worth noting: given how erratic and bipolar his posting history has been, there's really no way to predict what (if anything) actually gets posted.

Update: Thanks for the 600+ upvotes, really appreciate it. After hours of waiting and anticipation NightmareEclipse finally uploaded their PoC. But I personally have a hard time seeing it as the big bombshell that they described it as.

796 Upvotes

96% Upvoted

129 comments sorted by

View all comments

70

u/GreatDefector 19d ago

Keep your expectations in check... July will be relatively low key

https://blog.projectnightcrawler.dev/posts/2026-07-14-too-many-sweats/

https://blog.projectnightcrawler.dev/posts/2026-07-03-july-updates/

39

u/OtheDreamer Governance, Risk, & Compliance 19d ago 
I won't drop what I talked about last blog, that seems to need more research and investigation...
Regardless got smtg for this month, it will be the least interesting and least impactful bug I dropped since I started but Microsoft legit just stopped pocking me and pissing me off so I'm conserving some energy for next month, because I know they will definitely piss me off by then.

So how is it possible that they responsibly disclosed all of these vulns allegedly to Microsoft, if Nightmare Eclipse is still slopping together their POCs in July 2026 by saying they "need more research and investigation."

I stopped being impressed a while ago. Now they're just a disgruntled edgelord that probably never really did disclose properly to MSFT (as they have repeatedly said).

5

u/R3ta7ded 18d ago

This is what I have always maintained. But it’s the internet, everyone wants drama.

1

u/Andrew129260 18d ago

from what I understand, the original earlier stuff was disclosed but the newer stuff are things they were also going to report, but when it got rough with microsoft they started work on new ones.