SecurityBleepingComputer43 minutes ago
New Windows SignDrop Zero-Day Gains System Privileges
3 min read
Security researcher Abdelhamid Naceri released a Windows zero-day exploit named SignDrop that grants SYSTEM privileges by abusing Microsoft's October 2025 mitigation for the CLFS driver. The flaw affects 80% of Windows installations, including Windows 11 26H2 and Windows Server 2025 Experimental, allowing attackers to bypass antimalware engine self-defense mechanisms.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
