CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
Extending Threat Hunting and MDR to AI Together, Falcon Adversary OverWatch and Falcon Complete bring proactive…
CrowdStrike 2026 Legal Threat Landscape Report: eCrime Leads Attacks, China Activity Intensifies
The top China-nexus adversaries targeting the legal sector are WARP PANDA, TITAN PANDA, MURKY PANDA, and…
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
PHP contains a cross-request use-after-free vulnerability in the session upload-progress life cycle. If a fatal error…
CrowdStrike Uncovers New Agentic AI Campaigns
Despite their limited grasp of security fundamentals, the threat actor still used Claude Code to compromise…
U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
Between April 2025 and June 2026, CrowdStrike’s Counter Adversary Operations team identified personas, technical indicators, and…
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
While this activity has not been attributed to a named adversary, the threat actor is likely…
Copy, Paste, Compromised: How ClickFix Attacks Work and How CrowdStrike Stops Them
When the employee attempted to join the meeting, they almost certainly encountered a fake technical issue…
CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
Faster Attacks Demand Faster Action That fragmentation creates an incomplete picture. When adversary intelligence, external risk,…
PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting
eCrime threat actors will likely continue integrating AI-generated tooling into their operations, as these tools reduce…
Peer Pressure: Inside the Sality Botnet Disruption Operation
Sality’s P2P protocol cannot be patched. Unlike conventional malware that can receive code updates from a…
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
The npm package ecosystem, referenced in the above scenario, is the primary vector for supply chain…
Inside Astaroth’s New Spambot Component
Session Creation The Chromium command line includes several capabilities designed to suppress automation indicators, such as:…
CrowdStrike 2026 Technology Threat Landscape Report: China’s Ambitions Fuel Attacks
The CrowdStrike 2026 Technology Threat Landscape Report, based on intelligence from the CrowdStrike Counter Adversary Operations…
Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet
This case demonstrates: rule CrowdStrike_GlasswormRat_01 : glassworm glasswormrat { meta: copyright = “(c) 2026 CrowdStrike Inc.”…
Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report
Learn more: Download the CrowdStrike 2026 Financial Services Threat Landscape Report The trends outlined in this…