Nightmare Eclipse, the pseudonym of a researcher with an ongoing, very public beef with Microsoft, has dropped yet another Windows zero-day.
Nightmare Eclipse has dropped SignDrop, a Windows zero-day exploit that abuses CLFS and Defender to gain System privileges.
Public SignDrop exploit code abuses Windows CLFS log authentication to enable local SYSTEM privilege escalation, with no ...
New Windows SignDrop zero-day exploit could bypass Microsoft Defender, gain SYSTEM privileges, and affect up to 80% of Windows installations.
Log files come with many challenges. Firstly, they exist as enormous volumes of data. Almost everything that a user does is recorded, meaning that they quickly pile up, and not all of them are useful.