Nightmare Eclipse has released three new zero-day exploits, PrettyPrague, FalconFlank, and GreenSection, targeting Avast, CrowdStrike, and Nvidia products. The researcher, who previously exposed Microsoft and Kaspersky flaws, now appears to be broadening focus across major security and hardware vendors. #NightmareEclipse #PrettyPrague #FalconFlank #GreenSection #Avast #CrowdStrike #Nvidia
Keypoints
- Nightmare Eclipse disclosed three new zero-day exploits in a short period.
- PrettyPrague targets Avast sandboxing to gain full system privileges.
- FalconFlank affects CrowdStrike Falcon Sensor’s Office macro remediation feature.
- GreenSection abuses an Nvidia shared global memory issue for cross-boundary compromise.
- Kevin Beaumont said the Avast, CrowdStrike, and Kaspersky exploits work.
Read More: https://www.securityweek.com/nightmare-eclipse-drops-crowdstrike-nvidia-avast-zero-day-exploits/