Researchers have published proof-of-concept code for a new Windows privilege-escalation exploit dubbed SignDrop. It targets a log-authentication feature in the Common Log File System driver (clfs.sys), redirecting file paths during companion-file creation to let a local attacker escalate to SYSTEM. Because it needs local access rather than a network foothold, it's most dangerous when chained with another initial-access vector.
// source: thehackernews.com ↗