Featured Articles
CrowdStrike Introduces Agentic Adversary Emulation to Counter AI-Enabled Adversaries
Frontier AI is enabling threat actors to rapidly learn an environment, identify weaknesses, and chain them into viable paths to critical systems. These capabilities allow adversaries to move faster wh[…]
CrowdStrike Brings Enterprise Browser Security to the Falcon Platform
The browser has become a critical enterprise attack surface. Employees rely on the browser to access business applications, interact with AI tools, and handle sensitive data. Knowing this, attackers s[…]
CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats
The most dangerous agent in your environment may be one you already approved. It runs under a real employee's identity, connects to tools their team signed off on, and has the access it needs to do it[…]
CrowdStrike Advances AI Security and Safety from Endpoint to Cloud
AI agents are transforming enterprise computing. What began with employees using AI assistants is evolving into autonomous agents that access enterprise resources, invoke tools, execute code, and take[…]
Introducing AI Kill Switch: Taking Control When AI Agents Go Rogue
As organizations deploy increasingly autonomous and interconnected agents, the potential agentic blast radius grows. A single compromised or misaligned agent can trigger a chain of actions spanning cr[…]
What Makes a Good Security Agent? 5 Lessons from the AgentWorks Hackathon
Every security team is being told to adopt AI. Far fewer have been shown what "good" looks like in practice. Turnkey agents handle common, well-defined security tasks, but no two security teams operat[…]
VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign
CrowdStrike OverWatch identified a VAPOR PANDA campaign using ARTEX alongside the Chinese-developed DeepSeek large language model (LLM) and a second commercial LLM to conduct intrusions against multip[…]
When AI Guardrails Expose Vulnerabilities
CrowdStrike researchers asked a frontier AI model to explain a function in a small C web server. While it had previously explained every other function in the codebase without hesitation, it refused t[…]
CrowdStrike 2026 Legal Threat Landscape Report: eCrime Leads Attacks, China Activity Intensifies
Cyber intrusions targeting the legal sector nearly doubled between 2023 and 2026, reflecting the value of legal entities to both eCrime and nation-state adversaries. Legal entities hold privileged com[…]
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
To exploit these vulnerabilities, attackers must adapt the POC exploit for the specific PHP version and application (e.g., WordPress). This adaptation presents a meaningful barrier to would-be threat […]