FalconFlank zero-day escalates to SYSTEM on CrowdStrike-protected machines
A researcher releases FalconFlank, a zero-day that abuses CrowdStrike Falcon’s Office macro remediation to gain SYSTEM privileges on fully patched Windows 11 and Server machines. Disable the suspicious macro removal policy until an official fix lands.