Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon.

“FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in CrowdStrike Falcon Sensor,” the researcher said in a GitHub README file, adding

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests A blank field. A public repo. One reply to an email. A box left exposed.

AI Hiring Tools Yield Racial Bias and Systemic Rejection; 26% Black & 15% Asian

AI Hiring Tools Yield Racial Bias and Systemic Rejection; 26% Black & 15% Asian Source: Hacker News