Windows 0-day dropped by disgruntled researcher hands hackers System rights
Summary
A security researcher at odds with Microsoft has published details regarding a new Windows zero-day vulnerability. The security flaw, which affects the Common Log File System, allows local users to gain full system privileges.
Nightmare Eclipse, the pseudonym of a researcher with an ongoing, very public beef with Microsoft, has dropped yet another Windows zero-day. On Tuesday, Nightmare Eclipse disclosed SignDrop, a vulnerability that gives local users full System rights on some versions of Windows. The vulnerability resides in the Common Log File System, which Microsoft describes as a “general-purpose logging service used by…
Source: Read the full story at Ars Technica
Disclaimer: This content is for informational and educational purposes only and is not financial, investment or trading advice. Tech & Money Press is not a registered investment adviser or broker-dealer. Trading stocks, options and crypto involves substantial risk, including the loss of your entire investment. Do your own research and consult a licensed professional before making any financial decision. The authors may hold positions in the securities mentioned. News summaries are written with AI assistance from the original publisher's report and may contain errors; always check the original source. Full disclaimer.