Disgruntled Researcher Publishes "SignDrop" Windows Zero-Day That Grants SYSTEM Rights

A researcher released a public exploit for an unpatched Windows zero-day, dubbed "SignDrop," that lets local users escalate to full SYSTEM privileges. The disclosure appears to have been made by a disgruntled researcher, putting working attack code in the hands of hackers before a fix is available.

Why it matters: IT and security teams should assume attackers can use this local privilege escalation once they have any foothold, so monitoring, least-privilege controls, and patches for Windows should be prioritized as soon as Microsoft releases a fix.