New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
来源: The Hacker News ·
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privileged process opens a prepared log, using path redirection to take control of
常见问题
什么是 New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access？
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access is a 文章 discovery curated from The Hacker News. Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called…
如何访问或体验此内容？
You can experience this content directly on its original host (The Hacker News) by clicking the "Open Original" button.
此内容来源于哪里？
Curated from The Hacker News by the OnSuggest team to surface the most interesting and serendipitous content on the web.
相关发现
所有 科技 发现 →Axle raises $9M to bring AI agents to Wall Street’s meeting-makers
Axle has raised $9M led by Eniac and Bonfire Ventures. It makes software that helps investment banks arrange meetings between investors and company management, and will add more AI agents. It says some of North America’s biggest banks use it. Axle, a startup that makes software for investment banks, has raised $9M in a round […] This story continues at The Next Web
Apple is closing its Support Community forum after 28 years
Apple has stopped taking new posts on the Apple Support Community and will close the forum on 20 November. The site has been read-only since 10 November, according to a notice on its homepage. “You can continue to find trusted guidance and support on the official Apple Support site,” the notice says. 9to5Mac’s Marcus Mendes […] This story continues at The Next Web
J.Crew launches an AI stylist built on Anthropic’s Claude
J.Crew has launched Style Advisor, an AI stylist on its US website built with Anthropic’s Claude. Shoppers describe an occasion and get complete outfits from looks J.Crew’s stylists put together. Personal recommendations based on past purchases will come later. J.Crew has launched Style Advisor, an AI stylist on its website built with Anthropic’s Claude, Anthropic […] This story continues at The Next Web
Anthropic lets companies run Claude’s agent service on their own servers
Anthropic now lets companies run Claude Managed Agents in their own cloud or data centre. Agent histories and credentials stay on their systems, but each model call still goes to an outside provider such as Anthropic or AWS. Anthropic now lets companies run its Claude Managed Agents service on their own servers, Help Net Security […] This story continues at The Next Web
HubSpot brings back co-founder Brian Halligan as CEO to ‘refound’ it
HubSpot co-founder Brian Halligan is back as chief executive, five years after he stepped down. He replaces Yamini Rangan, who also leaves the board, with immediate effect from 12 November, the company announced. HubSpot calls it a “refounding” of the company. Halligan told Bloomberg’s Brody Ford that he plans to overhaul HubSpot’s product, culture and […] This story continues at The Next Web
Nebius shares fall 16% as data centre delays cut its 2026 outlook
Nebius shares fell 16% on Thursday after the Amsterdam-based AI cloud company cut its outlook for this year. It also raised its spending plans, CNBC’s Jordan Novet reported. The fall came despite third-quarter revenue that rose 571% from a year earlier, to $980.8m. Analysts surveyed by LSEG had expected $907.5m, according to CNBC. Nebius posted […] This story continues at The Next Web