SecurityThe Hacker Newsabout 1 hour ago
New SignDrop Zero-Day Exploit Targets Windows
4 min read
Researcher MSNightmare released SignDrop exploit code on Tuesday, allowing local users to gain SYSTEM privileges via the Windows CLFS driver. The proof of concept targets authentication checks added in October 2025 updates for Windows 11 25H2, 26H1, and Windows Server 2025. Independent testing by 78researchlab confirms the flaw works but notes it lacks reliability for operational use.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
