A new technique dubbed RedSun grants SYSTEM-level access on Windows 11, 10, and Server, underscoring the security risks of antivirus software operating with full system privileges. Discussions surrounding the issue emphasize that allowing tools like Windows Defender to run as SYSTEM creates massive attack surfaces ripe for privilege escalation exploits. Security advocates argue that Microsoft should handle core system-level scanning natively while restricting antivirus remediation components to lower-privilege, sandboxed environments.