New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
Teaser from the source
An anonymous security researcher who uses the "Nightmare Eclipse" handle released a CrowdStrike Falcon zero-day exploit named "FalconFlank" that lets attackers escalate privileges on up-to-date Windows systems. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on CrowdStrike
Other advisories
- Not ratedosv:CVE-2026-103056AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR
- HighCVE-2026-40058CrowdStrike Falcon sensor for Windows: TOCTOU-Race-Condition
- HighCVE-2026-40058CrowdStrike hat ein Sicherheitsupdate veröffentlicht, um eine Schwachstelle im Falcon-Sensor für Windows zu beheben.
- MediumCVE-2026-76380Splunk CrowdStrike OAuth API app for Splunk SOAR: Klartextspeicherung vertraulicher Informationen
- CriticalCVE-2026-40050CrowdStrike LogScale Self-Hosted: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-40050CrowdStrike LogScale Self-Hosted: Pfadüberschreitung (Path Traversal)
- Not ratedosv:MAL-2025-48991Malicious code in crowdstrike (npm)
- MediumCVE-2025-37728Kibana Insufficiently Protected Credentials in the CrowdStrike Connector
Other news entries
- Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideNewsThe Hacker News
- China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityNewsThe Hacker News
- Warp says attackers exploited a vendor in its infrastructure and accessed agent trace and telemetry dataBreachpwn.watch
- Bullhorn sees red after cyberattack knocks recruitment platform offlineNewsThe Register — Security
- ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial FirmsNewsThe Hacker News
- 123 Reg: "AI-driven cyberattack" exposed customer contact and account data; registrar suspects a China-nexus actorBreachpwn.watch
- Slim Spider Steals Crypto Custody Secrets From Brazilian Financial InstitutionNewsThe Hacker News
- Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day ExploitsNewsSecurityWeek
ID