AccountSubscribe

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’

SecurityWeekNovember 13, 2026Vulnerabilities Endpoint

MentionsMicrosoft Microsoft Windows

It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process. The post Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ appeared first on SecurityWeek .

Summary from SecurityWeek.

Read the full article at SecurityWeek

Full story4 outlets are covering this story. Read the summary and every outlet's coverage

Explained

The technology and terms in this story. Learn more

Other sources covering the same vulnerabilities or event.

New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections

Security Affairsjust nowVulnerabilitiesEndpoint

New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access

The Hacker News16h agoVulnerabilitiesEndpoint

New Windows SignDrop zero-day gives hackers SYSTEM privileges

BleepingComputer17h agoVulnerabilitiesEndpointThreat Intel

More in Vulnerabilities

Citrix Patches 10 Critical NetScaler Vulnerabilities

SecurityWeekjust nowVulnerabilitiesNetwork

Microsoft confirms Windows activation failures after November updates

BleepingComputerjust nowVulnerabilitiesEndpoint

OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes

Help Net Securityjust nowVulnerabilitiesAI

Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files

The Hacker News1h agoVulnerabilitiesThreat IntelNetwork

PHP2Shell Exploited in Destructive Check Point Gateway Attacks

SecurityWeek2h agoVulnerabilitiesNetworkCVE-2026-123039