Windows SignDrop zero-day has no patch yet, but it needs you to run something first

A new Windows zero-day called SignDrop can turn an ordinary user account into full SYSTEM control, and as of November 13, 2026, there is no patch for it. The catch: an attacker has to get code running on your PC first, so the best defense this week is an old one: don’t open what you […]