It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’
About this summary. This is a short excerpt from the description that SecurityWeek published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.securityweek.com/nightmare-eclipse-drops-windows-zero-day-exploit-signdrop/
Source attribution: headline and facts are from SecurityWeek (securityweek.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Windows 0-day dropped by disgruntled researcher hands hackers System rights
Nightmare Eclipse, the pseudonym of a researcher with an ongoing, very public beef with Microsoft, has dropped yet another Windows zero-day. On Tuesday, Nightmare…
4EverAble2Shell At a Glance
4EverAble2Shell is an N-central zero-day exploit chain that lets an unauthenticated remote attacker run commands as root on an on-premises N-able N-central server. An…
New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections
SignDrop is a Windows zero-day that abuses CLFS security protections to let local attackers gain SYSTEM privileges and bypass defenses. The researcher Chaotic Eclipse…
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of…
New Windows SignDrop zero-day gives hackers SYSTEM privileges
Security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) has released a new Windows zero-day exploit that can let attackers gain SYSTEM privileges.
November Patch Tuesday: An Overflowing Cornucopia of CVEs
Microsoft serves up an actively exploited Outlook zero-day, and a wave of critical Exchange, SharePoint, Windows Search, and LDAP bugs that exhausted defenders need to…