Nightmare Eclipse Releases Windows Zero-Day Exploit “SignDrop”

Security researcher Abdelhamid Naceri, known online as Nightmare Eclipse, released a zero-day exploit targeting Windows systems called SignDrop. The exploit may allow a local standard user to elevate privileges to System by abusing flawed logic in the Windows Common Log File System (CLFS). According to the source, there is no evidence that the zero-day has been exploited in the wild.