InfoSecBulletin Cybersecurity for mankind
CrowdStrike has issued a security advisory for a serious TLS vulnerability, CVE-2025-1146, in its Falcon Sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor. This vulnerability could enable man-in-the-middle (MiTM) attacks.
CrowdStrike secures communications from the Falcon sensor to its cloud using standard TLS. However, a validation error in the TLS connection could let attackers intercept and modify traffic between them.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
All Falcon Sensor versions for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor before version 7.21, except hotfix versions, are affected. However, Windows and Mac sensors are not impacted by this vulnerability.
CrowdStrike rated this vulnerability as 8.1 (HIGH) on the CVSS scale. There is currently no evidence of active exploitation, but users are strongly advised to update their software to reduce potential risks.
CrowdStrike has issued a security fix for all Falcon sensor versions for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor from 7.06 and above. Users are advised to update to version 7.21 or later promptly. Hotfixes for both supported and unsupported versions can be found in the Falcon console and applied through sensor update policies or direct downloads.
Organizations may be concerned about performance issues from the security update, but CrowdStrike has assured that the patch does not affect sensor performance.
Users should prioritize updating their Falcon Sensor for Linux and related components to safeguard their systems.
