New Windows zero-day turns Microsoft's own security fix into a path to full system access

Serving tech enthusiasts for over 25 years.
TechSpot means tech analysis and advice you can trust.

Facepalm: Last year, Microsoft started digitally signing the log files of a Windows component that attackers had been abusing for years. The idea was that any tampered log would simply get rejected. But that same safeguard is now the way in for a new zero-day that lets a standard user take complete control of a PC. Ironically, the attack needs Microsoft's own antivirus running to pull it off.

This latest exploit is called SignDrop. It comes from Abdelhamid Naceri, a former Microsoft employee who has been dumping unpatched Windows bugs online under the name Nightmare Eclipse since April. He published the code on GitHub on Tuesday, just as Microsoft was rolling out its November security updates.

A bug like this is notable because it can turn a minor infection into a full takeover....

Copyright of this story solely belongs to www.techspot.com. To see the full text click HERE