A proof-of-concept (PoC) dubbed FalconFlank claims to exploit a previously undisclosed privilege-escalation issue in the CrowdStrike Falcon Sensor for Windows. The alleged flaw is said to abuse Falcon’s remediation workflow for malicious Microsoft Office macros, potentially allowing a lower-privileged user to gain elevated access on fully patched Windows endpoints. According to MSNightmare, FalconFlank affects devices […]
The post FalconFlank PoC Claims CrowdStrike Falcon Zero-Day Enables Privilege Escalation on Windows appeared first on Cyber Security News.