Nightmare Eclipse Releases SignDrop Windows Zero-Day Exploit

A threat actor named Nightmare Eclipse has published a Windows zero-day exploit dubbed 'SignDrop' that abuses CLFS and Windows Defender to achieve arbitrary file creation in the context of the antimalware process. The exploit's technical details are public, increasing risk of widespread use before a patch is available. The impact is significant as it targets a core Windows component and bypasses security software.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works