Windows CLFS Zero-Day (CVE-2025-29824) Exploited by RansomEXX to Gain SYSTEM Privileges
Microsoft patched a zero-day in the Windows Common Log File System driver that ransomware operators Storm-0506 and RansomEXX actively exploited to escalate from standard user to SYSTEM before deploying payloads.