Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon.

“FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in CrowdStrike Falcon Sensor,” the researcher said in a GitHub README file, adding

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Show HN: WhatsApp MCP running free on Cloudflare

Show HN: WhatsApp MCP running free on Cloudflare Source: Hacker News

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers Sophos looked at a week of its own endpoint data and found that AI coding agents such as

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the