New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections
MentionsMicrosoftMicrosoft Windows
SignDrop is a Windows zero-day that abuses CLFS security protections to let local attackers gain SYSTEM privileges and bypass defenses. The researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare, Nightmare-Eclipse, and MSNightmare, published a proof-of-concept for a new Windows local privilege escalation zero-day, naming it SignDrop. The flaw sits inside the mitigation Microsoft rolled out […]
Summary from Security Affairs.
Explained
The technology and terms in this story. Learn more
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
- ConceptProof of conceptA demonstration that a flaw can be exploited, usually published by researchers.
- AttackPrivilege escalationGoing from limited access to more powerful access, such as from a normal user to administrator.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
Related coverage
Other sources covering the same vulnerabilities or event.