Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike

Why Organizations Secure AI Agents with Falcon Guardian

Oct 23, 2026 By Vanessa Villa In CrowdStrike
AI is changing from a tool that generates content into agents that reason, decide, and take autonomous action. Employees now use AI assistants in their browsers and desktop apps. Developers run coding agents that read files and execute commands on their machines. Business teams build agents and connect them to enterprise data through Model Context Protocol (MCP) servers. This shift from asking AI to tasking AI creates hard questions for security teams: Which AI agents are operating in the environment?
Read Post

PHP2Shell: Exposure and Response with the CrowdStrike Falcon Platform

Oct 23, 2026 By CrowdStrike In CrowdStrike
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) introduces two critical remote code execution vulnerabilities affecting PHP, making it important for security teams to identify affected systems, understand their exposure, and investigate potential exploitation.
View Video
CrowdStrike

CrowdStrike Protects Customers from Threats Delivered via PHP2Shell

Oct 21, 2026 By Amit Serper In CrowdStrike
Two critical memory-corruption remote code execution (RCE) vulnerabilities, collectively dubbed PHP2Shell, have been disclosed in core PHP, the underlying engine powering a vast portion of the web. The CrowdStrike Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of both vulnerabilities.
Read Post
CrowdStrike

CrowdStrike Uncovers New Agentic AI Campaigns

Oct 21, 2026 By CrowdStrike Counter Adversary Operations In CrowdStrike
A new report from the CrowdStrike Counter Adversary Operations team details research into four previously unreported threat actors, each of whom left their offensive agent frameworks exposed via open directories. In doing so, they shared detailed insight into their use of AI agents and revealed how adversaries are quickly becoming more proficient in AI.
Read Post
CrowdStrike

CrowdStrike Achieves NCSC CIR Enhanced Level Assurance

Oct 20, 2026 By Max Gebhardt In CrowdStrike
Some cyber incidents leave no margin for error, whether that's an attack that interrupts energy, water, or financial services, or a breach that triggers reporting obligations in several jurisdictions within hours. The UK National Cyber Security Centre (NCSC) created the Enhanced Level of its Cyber Incident Response (CIR) scheme for incidents like these. It recognizes providers that meet rigorous standards for high-quality incident response, at the highest level of risk.
Read Post

Inside the Cyber Superintelligence Lab with CrowdStrike's Bartley Richardson

Oct 16, 2026 By CrowdStrike In CrowdStrike
Bartley Richardson, Chief AI and Autonomous Systems Officer at CrowdStrike, recently took the stage at Fal.Con 2026 to announce CrowdStrike’s Cyber Superintelligence Lab. The lab brings together our AI researchers, offensive operators, and incident responders to build defensive model and harness capabilities for the agentic era. How are they doing it? “To build the best defense, you have to understand the best offense,” Bartley says.
View Video

Falcon Guardian: Claude Code Hooks

Oct 16, 2026 By CrowdStrike In CrowdStrike
Claude Code reads your developers' files and runs commands in their shell. A Social Security number pasted into a prompt or an API key in a.env file can reach the model, and a single force push can overwrite a shared branch. This demo shows how to secure Claude Code with CrowdStrike Falcon Guardian. Claude Code Hooks run a check at set points, such as when a developer submits a prompt or before a tool runs. Falcon Guardian uses those hooks to check prompts and tool calls against a central policy, deployed through Claude Code's managed settings file so developers can't override it.
View Video

Falcon Guardian: Claude Code Hooks Demo Drill-Down

Oct 15, 2026 By CrowdStrike In CrowdStrike
Claude Code reads your developers' files and runs commands in their shell. A Social Security number pasted into a prompt or an API key in a.env file can reach the model, and a single force push can overwrite a shared branch. This demo shows how to secure Claude Code with CrowdStrike Falcon Guardian. Claude Code Hooks run a check at set points, such as when a developer submits a prompt or before a tool runs. Falcon Guardian uses those hooks to check prompts and tool calls against a central policy, deployed through Claude Code's managed settings file so developers can't override it.
View Video
CrowdStrike

U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance

Oct 13, 2026 By CrowdStrike Counter Adversary Operations In CrowdStrike
In late September, 2026, CrowdStrike's Counter Adversary Operations team collaborated with the United States Federal Bureau of Investigation (FBI) to disrupt several laptop farms operating across the U.S. maintained by DPRK-nexus adversary FAMOUS CHOLLIMA to fraudulently employ operatives at American companies while concealing their true location and identity.
Read Post

Connect and Validate Third-Party Data with Falcon Next-Gen SIEM

Oct 9, 2026 By CrowdStrike In CrowdStrike
See how the Falcon Next-Gen SIEM Data Onboarding Agent simplifies the process of connecting and validating third-party security data. Using natural language, teams can identify the right connector, understand setup requirements, configure credentials, and create connections through a guided workflow.
View Video

Falcon Next-Gen Identity Security: Stopping Lateral Movement from Internet-Facing Devices

Oct 9, 2026 By CrowdStrike In CrowdStrike
When attackers compromise internet-facing devices, they may use them to access internal services and move laterally through the environment. Falcon Next-Gen Identity Security helps identify and stop this activity with dedicated detection and prevention for connections originating from classified internet-facing devices. With conditional access and automated response, organizations can block suspicious access, disable compromised users, and contain threats before they spread.
View Video
CrowdStrike

CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage

Oct 8, 2026 By Daniel Bernard In CrowdStrike
Critical infrastructure is where cyber risk becomes real-world risk. The environments powering energy, water, manufacturing, and transportation are among the most complex to defend as they often combine decades-old operational technology (OT) with modern IT. Downtime is not an option, and patching isn’t always possible. Now, AI is raising the stakes. Adversaries are using AI to move faster and operate at greater scale, compressing the time defenders have to respond to attacks.
Read Post

Proactive Security in Action Across the CrowdStrike Falcon Platform

Oct 8, 2026 By CrowdStrike In CrowdStrike
Proactive security starts with understanding the environment before an attacker can take advantage of it. In this demo, see how the CrowdStrike Falcon platform brings together proactive telemetry and context across endpoint, cloud, identity, network, applications, SaaS, and more to build a connected view of risk.
View Video
CrowdStrike

Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance

Oct 7, 2026 By Ashley Campion In CrowdStrike
CrowdStrike Intelligence identified infrastructure associated with a targeted campaign against South Korean financial organizations that resulted in exfiltrated data. The campaign was active from late September to early October 2026. Analysis of threat actor-controlled open directories uncovered Claude Code session histories, ARTEX configuration files, and Claude memory files, providing direct insight into the threat actor's operational methodology and tooling.
Read Post
CrowdStrike

CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

Oct 7, 2026 By Anne Aarness - Chris Prall In CrowdStrike
CrowdStrike has been named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment. We believe this recognition reflects the strength of the CrowdStrike Falcon platform and the proven endpoint capabilities CrowdStrike brings into the AI era: industry-leading protection at scale, consistent analyst recognition, measurable business value, and the trust of customers globally.
Read Post

Falcon Data Security for SaaS - Secure Sensitive Data in Microsoft 365

Oct 7, 2026 By CrowdStrike In CrowdStrike
See CrowdStrike Falcon Data Security for SaaS in action and learn how to discover, classify, and protect sensitive data across Microsoft 365. See how security teams can identify sensitive data in SharePoint and OneDrive, prioritize exposure, automatically apply Microsoft Sensitivity Labels, reduce unintended Microsoft Copilot exposure, and extend protection with just-in-time access.
View Video

See Falcon for XIoT in Action.

Oct 6, 2026 By CrowdStrike In CrowdStrike
CrowdStrike's Falcon for XIoT addresses challenges in managing complex industrial and clinical environments by providing visibility into operational assets. The solution helps teams prioritize vulnerabilities based on operational impact rather than severity alone, ensuring safe decisions while minimizing interruptions. Through a detailed investigation process, users can assess asset profiles, validate exposures, and implement controlled responses tailored to specific risks. This approach optimizes asset management and enhances safety in both operational technology (OT) and clinical settings.
View Video
CrowdStrike

Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers

Oct 6, 2026 By Donato Onofri - Paul Urian In CrowdStrike
Modern frontier AI models deploy safety classifiers. These are second AI models that sit between the user and the frontier model, evaluating every request in real time. If a request is flagged as harmful, the classifier blocks it before the model can respond. Significant investment and safety model expertise have made these classifiers effective. Anticipating how adversaries circumvent these systems is a security problem that requires different expertise.
Read Post
CrowdStrike

Falcon Data Security for SaaS Secures Sensitive Data in Microsoft 365

Oct 5, 2026 By Dana Larson In CrowdStrike
For many organizations, Microsoft 365 environments are essential to data security strategy. Their strategic plans live in SharePoint; their employee records and customer data are stored in OneDrive. Teams use these tools to collaborate on projects every day, and increasingly, AI tools like Microsoft Copilot can access the information they rely on.
Read Post
CrowdStrike

New in Falcon Cloud Security: Third-Party App Insights and AI-Enhanced Remediation

Oct 5, 2026 By Jason Williams In CrowdStrike
Two forces are reshaping modern cloud posture management: context and AI. Context gives security teams the business insight to understand risk. AI helps them turn that insight into faster, more informed action. CrowdStrike Falcon Cloud Security is advancing both. New third-party application insights map the external services cloud-native applications depend on, helping customers assess the risk those dependencies introduce.
Read Post
CrowdStrike

CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS

Oct 1, 2026 By Karan Sondhi In CrowdStrike
CISA has called SIEM-as-a-service (SIEMaaS) “the Rosetta Stone” for visibility for good reason. Federal defenders need to see what is happening across increasingly complex environments, understand what matters, and turn that context into action before an adversary achieves its objective.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.