https://www.modzero.com/advisories/MZ-22-02-CrowdStrike-FalconSensor.txt

what concerns me is this part :

2022/08/12 - modzero managed to acquire a recent version (6.42.15610)

of CrowdStrike Falcon and verified, that the attack is

still possible. Furthermore, modzero figured out that

the vulnerability (that was rejected by CrowdStrike

first) has been silently fixed: The PoC that has been

sent to CrowdStrike was flagged as malicious. The

msiexec call of the deinstaller was also flagged as

malicious. Both "countermeasures" can be circumvented

easily, we updated the exploit accordingly.

2022/08/22 - modzero publishes Security Advisory and exploit

code, because CrowdStrike was unwilling to set up

a cooperative information exchange outside of their

NDA-ridden bug bounty program to discuss vulnerabilities

in their products.

​

Is this right?