Researcher Nightmare Eclipse disclosed SignDrop, a Windows zero-day in the Common Log File System. An ordinary local user can manipulate symbolic links and induce Windows Defender to open a crafted CLFS container, enabling privilege escalation to full System rights on some Windows versions.