The disgruntled security researcher known as Nightmare Eclipse aka Chaotic Eclipse, Infinite Nightmare, and now also MSNightmare is moving away from their singular Microsoft vendetta and on to other vendors. On Thursday, they dropped a new zero day bug called FalconFlank that affects CrowdStrikes Falcon endpoint security platform albeit with a Windows link. According to the prolific zero day hunter , FalconFlank is a privilege escalation vulnerability that abuses the Microsoft Office malicious...

Read the full article at The Register