CybersecurityUpdated 2h ago

SignDrop claims local Windows users can gain SYSTEM access.

Security researcher Abdelhamid Naceri, also known as Nightmare Eclipse, released SignDrop, a public proof of concept that reports describe as a Windows zero-day exploit. The Hacker News says it targets a log-authentication feature added to the Common Log File System (CLFS) last year. Reports say the exploit claims a local Windows user can gain SYSTEM privileges through CLFS. SecurityWeek also reports that Windows Defender is involved in triggering arbitrary file creation in the antimalware process.

3 publishers3 reports

Coverage started Yesterday