Security · High impactFan score 44 · Tier B2 sources
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
The Hacker News ·
The Brief · written from 2 sources
- Security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released a new Windows zero-day exploit called SignDrop.
- The exploit can let attackers gain SYSTEM privileges on Windows.
Why it matters
A public zero-day that grants SYSTEM privileges lets an attacker who already has some access take full control of a Windows machine, so Windows teams should watch for a fix.
Who’s affected
- Windows users and administrators
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys…
Timeline
Full coverage · 2 sources
- 2h ago ↗
The Hacker News
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
- 4h ago ↗
BleepingComputer
New Windows SignDrop zero-day gives hackers SYSTEM privileges