BlueHammer Windows Zero-Day: Privilege Escalation Risk

BlueHammer is an unpatched Windows local privilege-escalation zero-day that abuses time-of-check/time-of-use and path confusion to elevate a low-privileged account to NT AUTHORITY\SYSTEM; public release of exploit code increases the operational risk despite some reliability inconsistencies, so organizations should tighten least-privilege, restrict local admin rights, and enhance endpoint monitoring until a patch is available.