Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon.

“FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in CrowdStrike Falcon Sensor,” the researcher said in a GitHub README file, adding

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access Attackers broke into an organization’s Oracle database through a SQL injection flaw in a public-facing web application,

Attack Update: Top 5 Attack-IPs auf doode.info – 08.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 65.109.35.209 β€” 1963 requests (recent log) 89.167.35.212 β€” 465 requests (recent log) 197.144.9.214 β€” 338 requests (recent

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers