September 6, 2026 · 9 min read
CrowdStrike 'FalconFlank' zero-day - what the third EDR zero-day in five weeks tells ANZ blue teams about containment, not patching
On 3 September 2026, security researcher Chaotic Eclipse (aka MSNightmare / Nightmare-Eclipse) released FalconFlank - a local privilege-escalation PoC targeting CrowdStrike Falcon Sensor. CrowdStrike is investigating and has issued a mitigation. This is the third endpoint-security zero-day from the same researcher in five weeks. The durable lesson is not the patch - it's that containment planning is now the load-bearing IT-pro discipline.
Read more →
