Between a Rock and a Hard Link
Project Zero's James Forshaw described how NTFS hard links can serve as a privilege-escalation primitive, because the kernel's NtSetInformationFile requested no access rights on the target file for the FileLinkInformation class, letting a sandboxed process...