Nightmare Eclipse (also MSNightmare)

New Capabilities

Publishing exploits; in a public dispute with Microsoft

On November 10, a researcher publishing as Nightmare Eclipse released SignDrop, a working exploit that lets an ordinary Windows user gain full System rights. The flaw lives in the Common Log File System (CLFS), a logging service built into Windows. It abuses a security check Microsoft added to that driver in October 2025.

Updated Yesterday