Windows SignDrop zero-day exploit grants SYSTEM privileges

Researcher Abdelhamid Naceri publicly disclosed a Windows zero-day, dubbed SignDrop, that allows local privilege escalation to SYSTEM. The exploit's release increases near-term risk of in-the-wild exploitation, though no active attacks have been confirmed yet. This matters because SYSTEM-level access enables full host compromise, a common precursor to ransomware and data theft.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works