It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
The post Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ appeared first on SecurityWeek.
https://www.securityweek.com/nightmare-eclipse-drops-windows-zero-day-exploit-signdrop/