Microsoft's October 2025 CLFS exploit mitigation is now being abused to grant hackers System rights
Technovangelist · x · 2026-11-14
Microsoft shipped a security mitigation in October 2025 to block CLFS exploits — and that very mitigation is now being leveraged by attackers to obtain System-level privileges on Windows. A textbook case of a defense mechanism turning into an attack primitive.
More from Safety
- Polymarket odds give Anthropic lab leak just 7% by mid-2027 after Claude safety incidents disclosed — Polymarket · 2026-11-14
- AI auditing organizations face recruiting crunch as talent flocks to labs — ShakeelHashim · 2026-11-14
- California to unveil first IVO framework, making AI evaluators accountable to the public, not labs — sethlazar · 2026-11-14
- NeurIPS 2026 paper: every tested model can persuade, coerce and deceive other agents — sethlazar · 2026-11-14
- PSA: Commercial AI systems can know your data without training on it — Michael_D_Moor · 2026-11-14
- OpenAI board member Paul Cristiano: AI accidents are the most likely cause of your death — Ars Technica AI · 2026-11-14