Tag: CrowdStrike FalconFlank

A newly disclosed FalconFlank zero-day reportedly allows attackers to gain SYSTEM-level privileges on fully updated Windows devices running the CrowdStrike Falcon sensor. CrowdStrike says it is investigating the claims and has issued mitigation guidance for customers. FalconFlank exploit targets macro-remediation feature An anonymous researcher known as Nightmare Eclipse released the proof-of-concept exploit on September 4.…