SignDrop Zero‑Day Bypasses Windows CLFS Authentication, Enables SYSTEM Escalation
A publicly released SignDrop exploit lets standard users gain SYSTEM rights on Windows 11 25H2/26H1 and Server 2025 systems with CLFS authentication enabled.
CyberDelegate | Official Magazine of The CyberDiplomat: latest reporting
Also today
Where the story is
Countries named in our reporting. Pick one to see the stories.
Loading the map
- SignDrop Zero‑Day Bypasses Windows CLFS Authentication, Enables SYSTEM Escalation
- Silent Lynx espionage campaign exploits Central Asian government networks with AI‑driven tools
- Turla’s Cereal Toolkit Thwarted in Romanian Government Email System
- Operation Endgame Shuts Down Gootloader, CastleRAT and StealC Infrastructure, Exposes Millions of Credentials
- KB Capital breach exposes personal data of 1,811 customers, partners and staff
- KakaoWork Platform Hacked, Personal Data of Employees and Users Exposed
- Critical race‑condition flaw in Apache HTTP Server’s HTTP/2 module forces urgent patching
- Massive wfx‑loot GitHub Credential‑Stealing Campaign Targets Thousands of Repos
- Hackers Use Fake Job Interview to Steal $6.34 Billion from Binance
- Luna Moth Returns to Law Firms, Hijacks Microsoft 365 Tokens via Video‑Call Scam
- Check Point Gateways Targeted in PHP2Shell Campaign Exploiting Critical Vulnerabilities
- Critical RCE Flaws Discovered in NEC WebSAM WinShare for Windows
- Ransomware Hits Koka City’s Emergency Broadcast System, Potential Data Leak
- C3RB3R Ransomware Exploits Unpatched Synology NAS Firmware
- FBI Seizes $1.2 Billion Tied to Binance Hack
- Compromised Institutional Email Accounts Fuel Bomb Threats Across European Schools.
- Brazil Treasury’s STN Breach Exposes Personal Data and Pix Keys
- Critical RCE Flaw in PTC Windchill and FlexPLM Actively Exploited, Patches Now Available
- Active Exploitation of Outlook CVE‑2026‑124194 Prompts Immediate Patch Rollout
- Spanish Police Arrest Suspect in Probe Into AI-Assisted Cyber Intrusions Targeting Public Services
- Maersk Discloses Unauthorized Access to Legacy System Amid Ransomware Claim
- South Korean Companies Hit by Leak of Anthropic Claude Account Data
- AI‑driven BOSSAI mesh attacks emergency services, universities and banks across 11 nations
- Thailand Tightens Cyber‑Defence After European Hacker Attacks
- OpenSSH password‑authentication bypass affects Alpine Linux servers
- Shooting the Messenger: Why Indian Companies Ignore the People Who Warn Them
- Compliant on Paper: Why GIGW 3.0 Doesn't Make Government Websites Secure
- Cyber Moral: The Ceremony
- Binance's $6.3 Billion Breach: Crypto's Biggest Heist
- A New Cyber Institute Is Welcome. A Cyber-Mature Banking System Would Be Better.
- Sky and Signal: Drones, Starlink and India's Eastern Security Gap
- The Synthetic Authority Playbook: How Deepfake 'Aid' Scams Industrialised Fraud in India
- ISO/IEC 27090: A Security Rulebook for AI Systems Finally Arrives
- When the Test Subject Breaks Out: AI Agents and India's New Cyber Reality
- Sovereignty Is Not for Sale: Starlink, India and the Off Switch
- Ahimsa in the Age of Algorithms
- The EU Cyber Resilience Act Moves From Paper to Practice: Malta Sets Up Its Enforcement Framework
- When Old Laws Meet New Weapons: The San Remo and Tallinn Manuals
- Starlink-Enabled Drones: The Counter-UAS Fight Is Becoming a Cyber Fight
- Cyber Privateers: What Trump's Hack-Back Memo Actually Changes
- The OpenAI–Hugging Face Incident Wasn't a Glitch. It Was a Choice, and Nobody Has Owned It Yet
- Trapped Behind the Scam: Why This Year's Trafficking Day Is a Cybercrime Story
- 84 New 5G Core Vulnerabilities — and Why This Is Just the Beginning
- Your CI Pipeline Is an Attack Surface. Most Teams Just Don't Treat It Like One.
- The NEET 2026 Leak: An Insider Threat Case for Baseline Cybersecurity Standards
- The Riskiest Vendor in Your Supply Chain Is Probably the One Nobody's Watching
- China Just Killed Its Most Popular AI Companions Overnight
- The Weakest Link in Your Supply Chain Might Be Invisible — And That's the Problem
- When Hackers Reach the Farm: Why Agritech Needs a Cybersecurity Wake-Up Call
- Supply Chain Cybersecurity: Why the Weakest Link Now Decides Global Security
- Stalkerware: The Invisible Crime Hiding on Millions of Phones
- Teaching Kids to Spot the Warning Signs Online: A Parent's Guide to Cyber Safety
- Land, Leadership, and Logins: Why Closing Africa's Gender Gap Starts With Trust
- Pretty Good Privacy: How One 1991 Tool Still Shapes the Way We Protect Digital Communication
- Securing the Power Sector: Why Energy Is the Backbone of Critical Infrastructure
- Why Africa's Cybercrime Fight Needs More Than a Drill — And Why Drills Alone Won't Win It
- Privacy Badger and the Privacy Paradox: Why We Say One Thing and Click Another
- "Why a Workshop Just for Women?" — A Question Worth Answering Properly
- From Storms to Servers: How the Energy Sector's Vulnerability Story Shifted from Climate to Cyber — and Why That's Actually Good News
- When the Same "Digital Key" Ends Up in Too Many Hands: The Hidden Risk of Duplicate SSH Certificates
- The Catalyst Problem: What Forces Governance Models to Change
- Building for the Speed of Light: A Cyber Governance Model That Might Actually Work
- Inside Geneva Digital Week 2026: How the World Sat Down to Govern AI Together
- When Insurance Fails: Why Financial Liability Cannot Regulate Cyber
- Cyber Supply Chain Regulation: Governing Dual-Use Technology, Cryptography, and the Global Cyber Supply Chain
- The Institution Trap: How Safety Regimes Become Tools of Dominance
- The Spy in Your Chat Window
- Project Insight, Ten Years On: Revisiting India's Flagship Tax Surveillance Program
- Fighting Counterfeit Medicine: How Blockchain, AI, and Machine Learning Are Reshaping Pharmaceutical Supply Chains
- The Tallinn Manual: A Look at the International Law Governing Cyber Operations
- The Shanghai Cooperation Organisation's Evolving Role in Shaping Cyber Norms
- When Secrecy Backfires: How Nuclear Policy Learned (and How Cyber is Forgetting) the Lesson of Open Innovation
- Cybercrime in West Africa: Beyond the Sakawa Narrative
- Cyber Governance and the Nuclear Model: Learning from Fifty Years of International Regulation
- Wildlife Trade, Cyber Sovereignty, and the Next Pandemic: Six Years After COVID-19
- The Dark Side of New Technology
- The Rise of the Fake Gadget Video: How AI Is Reshaping Online Scams — and What the Law Is Doing About It
- How a ₹99 UPI Payment Is Fueling a Shadow Market for Stolen Photos of Women
- The World Bank's Quiet Architecture: Cybersecurity and Banking Regulation Across the Global South
- Elizebeth Friedman: The Codebreaker Who Outwitted Rum-Runners and Nazi Spies
- UK Issues Urgent AI Safety Guidance as Threat to Children's Images Grows
- ECB's T2 Payment System Hit by Second Disruption in a Week, Resolved by Morning
- Taiwan's Anti-Communist Classes Return — But the Real Battlefield Is Already Digital
- Why India's MPs Need Cyber Awareness Training — And Why So Many Still Say No
- Geneva's Digital Week: Three AI Summits, One Very Crowded Argument
- Turkey's NATO Balancing Act: Untangling the Cyber Dependencies Behind the Ankara Summit
- Before You Buy the Weapon, Know Who Made It
- Between Two Giants: The Maldives, India, and China — A Past, Present, and Future Analysis
- Panama's Digital Exposure: How a Connectivity Hub Became a Cybersecurity Case Study
- China's Answer to Mythos: Inside Qihoo 360's Bid to Build an AI Vulnerability-Hunting Rival
- Israel Says Iranian Cyberattacks Have Tripled — And the Numbers Only Tell Half the Story
- When Hackers Join the Game: The Emerging Cyber Dimension of Sport Diplomacy
- AI and the Future of Counter-Terrorism: What Just Wrapped at UN Headquarters Signals for the Fight Ahead
- Cal Water Says Breach Was Contained to One Customer Account — But the Bigger Story Is What Iran-Linked Hackers Are Testing
- Boards Say Cyber Is Strategic. Their Governance Structures Say Otherwise.
- Tested Isn't the Same as Ready: The Lesson Wimbledon Teaches About Cyber Defense
- Securing the Games: Cybersecurity and Cyberdiplomacy Ahead of Glasgow 2026
- Washington, Tokyo, and Seoul Deepen Cyber Diplomacy Against North Korea's Illicit Financing
- Where Pipes Meet Policy: A Critical Look at the Case for Converging SCADA Security and Cyber Diplomacy
- Japan's AI Cybersecurity Pivot: Inside SoftBank and OpenAI's "Patching as a Service"
Preach / Practice
What security guidance says, set against what organisations actually do.
By desk
Cyber Diplomacy
When Old Laws Meet New Weapons: The San Remo and Tallinn Manuals
The Eternal Challenge: Law Chasing Technology There's a peculiar problem that haunts international law: by the time we codify the rules, the battlefield has already transformed. This tension lies at
Critical Infrastructure
Starlink-Enabled Drones: The Counter-UAS Fight Is Becoming a Cyber Fight
A recent infographic on Starlink-enabled drones lays out the physical-layer case clearly: swapping a drone's 2.4/5.8 GHz radio link for a Starlink terminal turns a
Threats & Incidents
SignDrop Zero‑Day Bypasses Windows CLFS Authentication, Enables SYSTEM Escalation
A publicly released SignDrop exploit lets standard users gain SYSTEM rights on Windows 11 25H2/26H1 and Server 2025 systems with CLFS authentication enabled.
Cybercrime & Fraud
Hackers Use Fake Job Interview to Steal $6.34 Billion from Binance
A fake recruitment scam let state‑backed hackers install malware on a Binance engineer’s Mac, leading to a multi‑billion dollar crypto theft and prompting a massive asset‑freeze effort.
Technology & Society
Spanish Police Arrest Suspect in Probe Into AI-Assisted Cyber Intrusions Targeting Public Services
A suspect was arrested in Ciudad Real for allegedly using AI tools to hack municipal and private platforms, raising concerns over emerging cyber‑threats.
National Policy
Govt Advisories & Cyber Policy
Thailand Tightens Cyber‑Defence After European Hacker Attacks
Thailand’s prime minister orders a national push to protect digital and control systems following recent attacks on European infrastructure.
All dispatches
KakaoWork Platform Hacked, Personal Data of Employees and Users Exposed
External attackers breached KakaoWork on Nov 9, leaking names, contact details and email content of current and former staff and external users in South Korea.
Critical race‑condition flaw in Apache HTTP Server’s HTTP/2 module forces urgent patching
A high‑severity remote code execution bug in Apache’s HTTP/2 support affects versions 2.4.55‑2.4.70; administrators should upgrade to 2.4.71 immediately.
Massive wfx‑loot GitHub Credential‑Stealing Campaign Targets Thousands of Repos
A coordinated attack using stolen GitHub tokens compromised 4,837 accounts, injected malicious workflows into over 61,000 repositories and exfiltrated cloud secrets.
Hackers Use Fake Job Interview to Steal $6.34 Billion from Binance
A fake recruitment scam let state‑backed hackers install malware on a Binance engineer’s Mac, leading to a multi‑billion dollar crypto theft and prompting a massive asset‑freeze effort.
Luna Moth Returns to Law Firms, Hijacks Microsoft 365 Tokens via Video‑Call Scam
Luna Moth extortionists are stealing Microsoft Graph tokens from lawyers on video calls, enabling bulk data theft from Office 365 without MFA.
Check Point Gateways Targeted in PHP2Shell Campaign Exploiting Critical Vulnerabilities
Check Point security gateways were scanned and exploited using PHP2Shell and CVE‑2026‑123039, affecting multiple versions and prompting urgent mitigation for admins worldwide.
Critical RCE Flaws Discovered in NEC WebSAM WinShare for Windows
NEC warns of two critical remote code execution bugs in WebSAM WinShare that let attackers gain SYSTEM rights; admins must patch or mitigate immediately.
Ransomware Hits Koka City’s Emergency Broadcast System, Potential Data Leak
A ransomware strike crippled Koka City’s voice broadcast network and may have exposed up to 25,000 installer or business names, prompting residents to seek alerts via alternative channels.
C3RB3R Ransomware Exploits Unpatched Synology NAS Firmware
Synology warns that outdated DSM versions leave NAS devices vulnerable to C3RB3R ransomware, urging immediate updates and network hardening.
FBI Seizes $1.2 Billion Tied to Binance Hack
The FBI announced a $1.2 billion crypto seizure linked to the $6.3 billion Binance theft, highlighting ongoing risks from North Korean cyber‑crime.
Compromised Institutional Email Accounts Fuel Bomb Threats Across European Schools.
A wave of bomb-threat hoaxes targeting European schools has been linked to compromised institutional email accounts. The incidents highlight how attackers can exploit trusted communication channels to cause widespread disruption.
Brazil Treasury’s STN Breach Exposes Personal Data and Pix Keys
Around 30,000 users’ personal details and 4,000 Pix keys were leaked after an unauthorized access to Brazil’s Treasury e‑Serviços platform.
Critical RCE Flaw in PTC Windchill and FlexPLM Actively Exploited, Patches Now Available
A CVE‑2026‑12569 remote‑code execution bug in PTC’s Windchill and FlexPLM products scores 9.3, is being weaponized, and patches have been released for on‑premise and hosted deployments.
