New Windows SignDrop zero-day gives hackers SYSTEM privileges

By Sergiu Gatlan

AI Summary

Researcher Abdelhamid Naceri (Nightmare Eclipse) released a public zero-day exploit called SignDrop targeting the Windows Common Log File System (CLFS) driver, enabling local privilege escalation to SYSTEM by abusing path redirection during companion file creation by privileged processes. The exploit targets a log-authentication feature added to clfs.sys in a previous update, and no patch has been released.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 78.0/100

# More from November 13

1
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 The Hacker News
2
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released BleepingComputer
3
US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance CyberScoop
4
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely The Hacker News
5
International operation dismantles malware networks, exposes 6.4 million stolen credentials CyberScoop
6
ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients The Hacker News
7
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass The Hacker News
9
Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories The Hacker News
10
AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets The Hacker News