Privilege Escalation definition in Cybersecurity
Privilege escalation is the act of exploiting a bug, design flaw, or configuration oversight in an operating system or software application to gain elevated access to resources that are normally protected from an application or user.
Notable Incidents
- The Windows "EternalBlue" SMB vulnerability, exploited by WannaCry ransomware to achieve privilege escalation. Wikipedia
- The Unix "Dirty COW" bug that allowed attackers to gain root access to Unix-based systems.
How to Protect Your Network against Privilege Escalation
- Regularly update and patch all systems and software.
- Employ least privilege principles and monitor for unusual activity.