29 minutes. Not the breakout time to fear.
Per BleepingComputer, Microsoft is working on a patch for the 'RoguePlanet' zero-day vulnerability in Microsoft Defender, which was disclosed just a week ago. This vulnerability exploits a race condition to spawn a command prompt with System privileges, as demonstrated by public PoC code, according to SecurityWeek.
While many focus on the 29-minute average breakout time, the real concern is the systemic vulnerability in Defender itself. Per IBM's Cost of a Data Breach Report 2025, the average cost of a breach is $4.44M, with 42% of exploited vulnerabilities being zero-day, as reported by CrowdStrike Global Threat Report 2026.
The defensive math: -> Implement a temporary workaround to disable the vulnerable Defender component, as recommended by Microsoft, to reduce the attack surface. -> Conduct an urgent review of all endpoint security tools for similar vulnerabilities, leveraging benchmarks from Mandiant M-Trends 2026. -> Prioritize patch deployment based on CVSS scores and exploit availability, using data from ENISA Threat Landscape 2025 to inform risk assessment.
Can your team patch faster than the next zero-day's breakout time?