Microsoft Defender finds zero-day in Windows CLFS System
Microsoft Threat Intelligence Center and Microsoft Security Response Center have discovered post-compromise exploitation of a zero-day elevation of privilege vulnerability in the Windows Common Log File System (CLFS) against a small number of targets. The targets include organizations in the information technology (IT) and real estate sectors of the United States.