Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon.

“FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in CrowdStrike Falcon Sensor,” the researcher said in a GitHub README file, adding

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It Ask an AI coding agent to scan open-source code for security holes, and it might run the

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories Attackers keep finding new keys. The funny part is that defenders keep inventing where to store

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw An academic study has disclosed a “widespread class” of security vulnerabilities impacting 4G and 5G core