A security researcher known as ‘Nightmare Eclipse’ has released a proof-of-concept (PoC) exploit, dubbed ‘FalconFlank,’ for a new zero-day privilege escalation vulnerability in CrowdStrike Falcon. The exploit abuses the malicious macros remediation feature in the CrowdStrike Falcon Sensor to gain SYSTEM privileges on up-to-date Windows systems. This development highlights a significant bypass in a widely used endpoint security product.