Windows 0-day dropped by disgruntled researcher hands hackers System rights
Summary
Ars Technica reports a Windows zero-day named SignDrop that allows local users to obtain SYSTEM rights by abusing the Common Log File System and Windows Defender. The flaw arises from interactions between CLFS, Defender, and authentication controls, enabling privilege escalation that could bypass security protections. The exploit has been demonstrated on select Windows versions, and patch status/availability is unclear.