A new proof of concept called BigDiskBuster, published on GitHub on September 19, 2026, by the actor known as MSNightmare, shows that Defender doesn’t need to be disabled to stop receiving updates, it just needs a much simpler dependency: disk space.