CVE-2022-2841

CVE-2022-2841 affects CrowdStrike Falcon sensor versions 6.31.14505.0, 6.42.15610, and 6.44.15806 via the Uninstallation Handler. The root cause is an authorization flaw that can be exploited remotely to uninstall the sensor without proper authorization. Public exploitation appears in disclosures...

PT-2022-4350 · Crowdstrike · Crowdstrike Falcon

Name of the Vulnerable Software and Affected Versions: CrowdStrike Falcon versions 6.31.14505.0 through 6.44.15806 Description: A vulnerability was found in the Uninstallation Handler component of CrowdStrike Falcon, related to incorrect implementation of the uninstall protection function. This...

APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools

Cyber criminals, under the moniker Aquatic Panda, are the latest advanced persistent threat group APT to exploit the Log4Shell vulnerability. Researchers from CrowdStrike Falcon OverWatch recently disrupted the threat actors using Log4Shell exploit tools on a vulnerable VMware installation during...

Automated Security Response: Falcon Orchestrator

CrowdStrike Falcon Orchestrator is an extendable Windows-based application that provides workflow automation, case management and security response functionality. The tool leverages the highly extensible APIs contained within the CrowdStrike Falcon Connect program. Falcon Orchestrator has only be...