> TritonInfoSec News
Home / Sep 05, 2026 / Story
0
#4 BleepingComputer general September 04, 2026 at 13:22 UTC

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges

By Sergiu Gatlan

AI Summary

A researcher using the handle 'Nightmare Eclipse' released a public PoC exploit called FalconFlank that abuses CrowdStrike Falcon Sensor's malicious macro remediation feature to escalate privileges to SYSTEM on fully up-to-date Windows systems. The zero-day is particularly significant given CrowdStrike's ubiquitous deployment across enterprise security environments, making it a high-value target for attackers seeking to subvert endpoint detection tools.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 85.0/100

# More from September 05

  1. 1
    Critical Citrix NetScaler auth bypass now leveraged in attacks BleepingComputer
  2. 2
    Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day The Hacker News
  3. 3
    12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover SecurityWeek
  4. 5
    HPE Patches Critical RCE Vulnerabilities in AOS-CX SecurityWeek
  5. 6
    Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters The Hacker News
  6. 7
    IDScan sued over alleged data breach affecting 153 million drivers BleepingComputer
  7. 8
    Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws The Hacker News
  8. 9
    Attackers exploit zero-days in consistently besieged SonicWall product CyberScoop
  9. 10
    Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal SecurityWeek