Researcher Publishes CrowdStrike Privilege Escalation Zero Day

A security researcher known as "Nightmare Eclipse" published a public proof-of-concept for FalconFlank, a zero-day privilege escalation that abuses CrowdStrike Falcon Sensor's Microsoft Office file malicious macro removal feature on up-to-date Windows systems; CrowdStrike has advised customers to disable that policy while investigating and has published a tech alert in its support portal, though no CVE has been assigned yet, and other researchers have validated the PoC.