Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike Services Observes SCATTERED SPIDER Escalate Attacks Across Industries

SCATTERED SPIDER, an eCrime adversary, has recently broadened its target scope to include the aviation sector, in addition to its established focus on the insurance and retail industries, as observed by CrowdStrike Services. Throughout Q2 2025, SCATTERED SPIDER's activities have primarily centered on U.S.-based insurance and retail entities, along with U.K.-based retail entities.

Prescription for Protection: Healthcare Industry Observations from CrowdStrike Investigations

The healthcare sector continues to be a prime target for cyber adversaries, with threat actors constantly evolving their tactics to exploit vulnerabilities. Over the past year, CrowdStrike Services responded to a growing number of financially motivated attacks aimed at encrypting data and extorting victims across the healthcare ecosystem.

How CrowdStrike Traces Attack Paths to Sensitive Data in the Cloud

As organizations adopt hybrid and multi-cloud architectures, the attack surface quickly expands, often outpacing defender’s ability to see and stop threats. This growing complexity fuels risk — creating blind spots adversaries exploit through cloud misconfigurations, excessive permissions, and unpatched vulnerabilities. These conditions allow attackers to break in, move laterally, and gain higher levels of access.

CrowdStrike Falcon Wins AV-Comparatives Awards for EDR Detection and Mac Security

AV-Comparatives, an independent cybersecurity software testing organization, has released the results of two key evaluations of enterprise security solutions. The CrowdStrike Falcon cybersecurity platform achieved the EDR Detection Certification in AV-Comparatives’ inaugural 2025 EDR Detection Validation Test and the AV-Comparatives 2025 Mac Approved Security Award. This independent validation confirms the Falcon platform’s ability to stop breaches across the modern enterprise.

Falcon Exposure Management's AI-Powered Risk Prioritization Shows Organizations What to Fix First

As the attack surface expands and the number of vulnerabilities grows, organizations face a new crisis: how to prioritize which vulnerabilities to fix first based on their level of risk. CrowdStrike Falcon Exposure Management addresses this challenge with new AI-powered capabilities to help defenders identify what matters most and take action with precision. New innovations include AI-powered Asset Criticality, Client-Side Attack Path Analysis, and a CrowdStrike Falcon Next-Gen SIEM integration.

CrowdStrike Named a Leader in the 2025 IDC MarketScape for CNAPP

We’re proud to announce that CrowdStrike has been named a Leader in the IDC MarketScape: Worldwide Cloud-Native Application Protection Platform 2025 Vendor Assessment (doc, June 2025). This recognition marks another milestone for CrowdStrike as cloud security becomes central to stopping modern cyber threats across hybrid and multi-cloud environments.

Falcon Exposure Management ExPRT.AI: Demo Drill Down

Most vulnerability tools flood teams with static scores and long lists but ExPRT.AI changes the game by predicting what adversaries are most likely to exploit. This demo drill down shows how ExPRT.AI dynamically scores risk across asset types, network exposures, and third-party findings. You’ll see how it re-prioritizes vulnerabilities based on real-world telemetry, attacker behavior, and environmental context including a Tenable example.

Vulnerability Data in Next Gen-SIEM with Falcon Exposure Management

Vulnerability data is often siloed and captured in static dashboards, disconnected from real-time investigation. But with Falcon Exposure Management streaming into NG-SIEM, that changes. This demo shows how teams can correlate live vulnerability events with endpoint behavior, network activity, and even cloud telemetry. Using a Firefox example, we trace active and historical exposure, revealing how ExPRT.AI, asset metadata, and cloud-aware context come together in Next Gen SIEM.

When the Adversary Shows Up in Person

Physical security and IT security have gone hand in hand for a long time. While cybersecurity teams are rightfully focused on protecting their virtual environments, they should also have an eye on whether an adversary is walking through the front door. “Anytime there’s a physical boundary, an adversary is going to look to cross over that — whether it be in person or using some technology to get over that boundary,” Adam says in this episode on physical security threats.