42
42
57
42
42
30
42
55
60
60
57
30
60
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
Researcher Nightmare Eclipse released a PoC for FalconFlank, a privilege escalation zero-day in CrowdStrike Falcon's Office macro remediation feature.
Researcher Nightmare Eclipse published a zero-day PoC dubbed FalconFlank targeting CrowdStrike Falcon's Microsoft Office malicious macro removal feature, achieving privilege escalation on fully updated Windows 11 25H2 and Windows Server 2025 with Optimal Protection and macro removal enabled. Kevin Beaumont independently confirmed the exploit works. The same researcher also released HardBreacher, an elevation-of-privilege bug in Kaspersky Endpoint (since fixed via update), PrettyPrague, an Avast Sandbox flaw that dumps the SAM database for a SYSTEM shell (Gen Digital is developing a patch), and GreenSection, an Nvidia memory corruption bug that crashes systems. CrowdStrike advises customers to disable the Suspicious Macro Removal Windows policy while it investigates.
55
60
57
42
30
60
42
57
57
57
60
42
30
57
30
57
42
60
30
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
Authorities arrested two alleged TeamPCP members whose hacking group infected over 1,000 organizations via supply-chain attack campaigns.
Law enforcement arrested two individuals suspected of membership in TeamPCP, a prolific hacking group. According to Ars Technica, the group infected more than 1,000 organizations through a relentless supply-chain attack campaign. The arrests mark a notable step in efforts to disrupt the group's operations.
55
60
60
‘Elon Musk’ Was a Prolific Money Launderer for Hackers and Drug Traffickers. It Was Secretly the FBI
57
57
57
57
60