https://blog.comfidentia.cl/en/tags/exploit/Recent content in Exploit on Blog - ComfidentiaHugoenThu, 03 Sep 2026 00:00:00 +0000https://blog.comfidentia.cl/en/2026/09/03/chaotic-eclipse-releases-crowdstrike-falcon-zeroday-falconflank/Thu, 03 Sep 2026 00:00:00 +0000https://blog.comfidentia.cl/en/2026/09/03/chaotic-eclipse-releases-crowdstrike-falcon-zeroday-falconflank/<h2 id="chaotic-eclipse-unveils-falconflank-zero-day-for-crowdstrike-falcon">Chaotic Eclipse Unveils FalconFlank Zero-Day for Crowdstrike Falcon</h2> <p>Security researcher Chaotic Eclipse, also known by aliases like INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse, has publicly released &ldquo;FalconFlank,&rdquo; a proof-of-concept (PoC) exploit for a zero-day privilege escalation vulnerability affecting the Crowdstrike Falcon cybersecurity platform.</p> <p><br></br></p> <h3 id="details-of-falconflank-exploit">Details of FalconFlank Exploit</h3> <p>FalconFlank exploits Falcon&rsquo;s &ldquo;Microsoft Office file malicious macro removal&rdquo; feature. This remediation function, which operates with high privileges, can be abused to escalate privileges from a low-privileged local user to a more powerful system context.</p>