The Hacker News

New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access

Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privileged process opens a prepared log, using path redirection to take control of

By The Hacker News

1 min read
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
AI-generated illustration

Got news to share with the events industry?

Submit a press release or story tip and reach thousands of event professionals.

Get in touch→

More in Cybersecurity, Cryptography & Digital Trust

Related Insights