Blog

Thoughts, tutorials, and insights on IT infrastructure, cybersecurity, and systems administration.

Browse by topic

CrowdStrike FalconFalconFlank+6 more

FalconFlank: A Race Condition in CrowdStrike Falcon's Own Remediation Grants SYSTEM

A TOCTOU race in CrowdStrike Falcon's Office macro remediation lets a local attacker hijack the sensor's own privileged cleanup routine for DLL side-loading straight to SYSTEM — no patch yet, only a policy workaround.

Sep 14, 20263

Chat with me!