← Back to Feed
New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
September 4, 2026 · BleepingComputer · Severity: CRITICAL
An anonymous security researcher who uses the "Nightmare Eclipse" handle released a CrowdStrike Falcon zero-day exploit named "FalconFlank" that lets attackers escalate privileges on up-to-date Windows systems.
Key Takeaways
- A new CrowdStrike FalconFlank zero-day vulnerability grants attackers SYSTEM privileges on affected Windows systems.
- The vulnerability exploits the CrowdStrike Falcon security agent to elevate privileges and bypass defenses.
- CrowdStrike has released a security update and recommends immediate deployment to protect endpoints.