Nightmare Eclipse, the pseudonym of a researcher with an ongoing, very public beef with Microsoft, has dropped yet another Windows zero-day. On Tuesday, Nightmare Eclipse disclosed SignDrop, a vulnerability that gives local users full System rights on some versions of Windows.
Windows 0-day dropped by disgruntled researcher hands hackers System rights
About this summary. This is a short excerpt from the description that Ars Technica published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://arstechnica.com/security/2026/11/windows-0-day-dropped-by-disgruntled-researcher-hands-hackers-system-rights/
Source attribution: headline and facts are from Ars Technica (arstechnica.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections
SignDrop is a Windows zero-day that abuses CLFS security protections to let local attackers gain SYSTEM privileges and bypass defenses. The researcher Chaotic Eclipse…
November Patch Tuesday: An Overflowing Cornucopia of CVEs
Microsoft serves up an actively exploited Outlook zero-day, and a wave of critical Exchange, SharePoint, Windows Search, and LDAP bugs that exhausted defenders need to…
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
Microsoft’s streak of record-breaking vulnerability disclosures continued with a mega Patch Tuesday, containing 1,413 defects affecting the company’s various enterprise…
Update Windows: Record Patch Tuesday fixes flaw already under attack
Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other…
4EverAble2Shell At a Glance
4EverAble2Shell is an N-central zero-day exploit chain that lets an unauthenticated remote attacker run commands as root on an on-premises N-able N-central server. An…
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.