Security researcher Nightmare Eclipse has released a new Windows zero-day named SignDrop The zero-day can allow attackers to elevate privileges on Windows systems. It works by exploiting Microsoft's mitigations against CLFS authentication attacks https://github.com/MSNightmare/SignDrop