New Windows SignDrop Zero-Day Exploit Allows Attackers to Gain SYSTEM Privileges

First reported 12 Nov, 06:41 UTCSource: GBHackersLast editorial activity 12 Nov, 06:41 UTCWrite a comment ↓

Restaurant counter with SpotOn POS system and burger meal, featuring customer interaction. — Illustrative photo.Photo by SpotOn POS on PexelsMicrosoft logo shown for identification only; no affiliation with or endorsement of WORLDTECH is implied.

What happened

A researcher known as MSNightmare, also called Chaotic Eclipse, has published a working proof of concept for an unpatched Windows zero-day (a flaw already being used in attacks before a fix exists) dubbed SignDrop. The exploit turns a standard user account into NT AUTHORITY\SYSTEM by abusing the Common Log File System (CLFS) driver, clfs.sys.

What Matters Now

Interior of cotemporary office with wooden tables and chairs illuminated by ceiling lamps — Photo: Max Vakhtbovych / Pexels

Startups & Business

Vilnius-based Biomatter raises €16.2 million to make AI-designed custom enzymes not found in nature

Source: EU-Startups + 3 more ·12 Nov, 08:58 UTC

Close-up of a vintage AMD K6 CPU on a retro motherboard showing intricate electronic details. — Photo: Nicolas Foster / Pexels

Chips & Hardware

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

Source: The Hacker News ·12 Nov, 12:47 UTC

Monochrome image of a laptop, camera, lens, and coffee cup on a wooden desk — Photo: Pixabay / Pexels

Technology

Microsoft outlines delivery plan for upcoming eMudhra certificate patch

Source: Neowin ·12 Nov, 07:00 UTC

Sources & evidence

GBHackers Reporting source
New Windows SignDrop Zero-Day Exploit Allows Attackers to Gain SYSTEM Privileges ↗
https://gbhackers.com/new-windows-signdrop-zero-day/

What happened

Sources & evidence

Your privacy choice