NewApp Digest
search bot

support portal

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
Tech Optimizer
September 3, 2026

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Nightmare Eclipse, a security researcher known for identifying vulnerabilities in Microsoft products, has shifted focus to other vendors, revealing a zero-day vulnerability called FalconFlank that targets CrowdStrike’s Falcon endpoint security platform. FalconFlank is a privilege escalation vulnerability that exploits the Microsoft Office malicious macros remediation feature within CrowdStrike Falcon. CrowdStrike is investigating the claims and advises customers to disable the Microsoft Office File Suspicious Macro Removal Windows policy setting while assuring them of continued protection through Cloud Anti-malware settings. The exploit works on fully updated Windows 11 25H2 and Windows Server 2025 systems running CrowdStrike Falcon with Optimal Protection enabled. Nightmare Eclipse has also discovered other vulnerabilities, including HardBreacher affecting Kaspersky’s endpoint antivirus and PrettyPrague in Gen Digital’s Avast antivirus, which allows attackers to dump the SAM database. Gen Digital is developing a patch for the Avast vulnerability, while Kaspersky has not commented. Additionally, Nightmare disclosed a memory corruption zero-day vulnerability in Nvidia, named GreenSection, which causes system crashes.
Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha
Tech Optimizer
May 4, 2026

Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha

Microsoft Defender mistakenly flagged legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha, leading to their removal from Windows systems globally. This issue arose after a Defender signature update on April 30th, with affected certificates including 0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 and DDFB16CD4931C973A2037D3FC83A4D7D775D05E4. The certificates were removed from the AuthRoot store under the Registry key HKLMSOFTWAREMicrosoftSystemCertificatesAuthRootCertificates. Microsoft has addressed the issue in Security Intelligence update version 1.449.430.0, which also restored the removed certificates. The false positives were linked to detections related to a recent DigiCert breach, where threat actors obtained valid code-signing certificates used for signing malware. DigiCert revoked 60 code-signing certificates, including those linked to the "Zhong Stealer" malware campaign. The malware utilized certificates issued to companies like Lenovo and Kingston, but the certificates flagged by Microsoft Defender are root certificates and do not correspond to the revoked code-signing certificates.
Friday tickets and 6 TB of WAL: a day in the life of a Postgres Professional support engineer
Tech Optimizer
December 12, 2025

Friday tickets and 6 TB of WAL: a day in the life of a Postgres Professional support engineer

Technical support at Postgres Professional involves both troubleshooting and engineering tasks, requiring deep product knowledge and the ability to replicate issues in test environments. A notable incident involved a client whose pg_wal directory grew to 6 TB due to a checkpoint process failure, which was resolved by disabling the archive_timeout parameter. Clients typically have a strong technical background, but support engineers must also communicate effectively, especially with stressed clients. Essential skills for support engineers include a thorough understanding of Postgres Pro, operating systems, networking, and programming. Opportunities for growth within technical support are abundant, and the future may see AI taking on simpler tasks while complex cases remain for human engineers.
Can't sign up for Windows 10's extended updates? Here's why that might be – and what you can do about it
Winsage
November 10, 2025

Can’t sign up for Windows 10’s extended updates? Here’s why that might be – and what you can do about it

Users of Windows 10 are facing challenges with Microsoft's Extended Security Updates (ESU) program, which is not functioning properly for some due to regional limitations and technical glitches. These issues prevent certain users from enrolling in the program, which is intended to provide critical security updates. Some users report that the ESU rollout is unavailable in their area, while others are blocked from signing up due to bugs misidentifying their Windows 10 PCs. While some have attempted to resolve these issues using the Media Creation Tool for an in-place upgrade, caution is advised, and backing up data is recommended. Users are also considering waiting for Microsoft to address these enrollment challenges, although the first security update under the ESU program is set to roll out soon, leaving those unable to enroll feeling vulnerable. A suggestion circulating on platforms like Reddit involves accessing the ESU enrollment via a specific link in Microsoft's end-of-support portal, which has reportedly helped some users bypass standard enrollment issues. However, many users express frustration as the October 14 End of Life deadline for Windows 10 approaches, and some may consider upgrading to Windows 11 if ESU issues persist. Additionally, even users who have successfully enrolled in the ESU program sometimes receive incorrect notifications indicating they are not supported.
CrowdStrike releases the details behind Microsoft Windows outage
Winsage
July 20, 2024

CrowdStrike releases the details behind Microsoft Windows outage

A sensor configuration update for Microsoft Windows systems caused a massive IT outage on July 19, possibly the largest in history. The update triggered a logic error, leading to a system crash and the 'blue screen of death'. CrowdStrike, the company responsible for the update, corrected the error and systems are returning to normal. Customers running the Falcon sensor for Windows version 7.11 and above were affected. CrowdStrike stated that the incident was not a cyberattack. Users can visit the CrowdStrike website for more information on fixing the error and coming back online.
What is CrowdStrike and how did it cause a global Windows outage?
Winsage
July 19, 2024

What is CrowdStrike and how did it cause a global Windows outage?

CrowdStrike caused a global outage by pushing an update to its Falcon software, which interacted with other computer systems and software, causing a malfunction that disabled systems worldwide. The CEO of CrowdStrike, George Kurtz, apologized for the outage, attributing it to a faulty piece of code. The company stated that it was not a security incident or cyberattack, and a fix has been deployed. Another outage also hit Microsoft's Azure cloud services on the same day, but Microsoft stated that the two outages were unrelated. CrowdStrike's CEO mentioned that it could take some time for systems to fully recover from the outage.
Search