Zero-day lets non-admin modify admin accounts as patch blitz hits Windows
A new Windows zero-day called HiveLegacy lets a low-privilege user modify an admin’s registry hive through the Windows User Profile Service, potentially escalating to admin rights when the admin logs in; Microsoft is investigating amid a record patch release, and researchers recommend defenses like a detection script and monitoring registry activity.