Crowdstrike Blog

ID: ecfdd2cb-9727-52c9-bf18-9266b2e2fd61

STIX ID: identity--ecfdd2cb-9727-52c9-bf18-9266b2e2fd61

Feed Type: rss

Earliest post: 2024-09-18

Latest post: 2026-10-13

Industry-leading cybersecurity insights, threat research, incident analysis, and updates from CrowdStrike’s global intelligence teams.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

10/14/2026

Title	Date Published ↓	Threat Score	Author	Visible
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance	2026-10-07	70	Ashley Campion	True
Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers	2026-10-06	35	Donato Onofri - Paul Urian	True
Copy, Paste, Compromised: How ClickFix Attacks Work and How CrowdStrike Stops Them	2026-09-29	75	Hananel Livneh	True
PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting	2026-09-15	70	Maddie Stewart	True
September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs	2026-09-08	90	Falcon Exposure Management Team	True
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks	2026-09-02	85	Anne Aarness - Chris Prall	True
Peer Pressure: Inside the Sality Botnet Disruption Operation	2026-09-01	75	CrowdStrike Counter Adversary Operations	True
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs	2026-08-11	92	Falcon Exposure Management Team	True
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX	2026-08-07	75	Erez Goldberg	True
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates	2026-08-03	90	Counter Adversary Operations	True
Inside Astaroth's New Spambot Component	2026-07-29	72	Kevin Ratto	True
Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks	2026-07-21	90	John Prieto	True
Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense	2026-07-20	70	Joel Spurlock	True
AIDR: How CrowdStrike Is Defining the Next Era of Cybersecurity	2026-07-15	65	CrowdStrike	True
July 2026 Patch Tuesday: Microsoft Patches 622 Vulnerabilities Including Two Exploited Zero-Days	2026-07-14	85	Falcon Exposure Management Team	True
New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever	2026-06-18	65	Mathilde Venault	True
CrowdStrike 2026 Technology Threat Landscape Report: China’s Ambitions Fuel Attacks	2026-06-09	88	Counter Adversary Operations	True
June 2026 Patch Tuesday: Microsoft Patches 206 Vulnerabilities Including Three Publicly Disclosed Zero-Days	2026-06-09	75	Falcon Exposure Management Team	True
Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet	2026-05-26	88	Counter Adversary Operations	True
How to Protect Identities and Sessions from Infostealers	2026-05-20	70	Hananel Livneh	True
Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report	2026-05-14	88	Counter Adversary Operations	True
May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEs	2026-05-12	72	Falcon Exposure Management Team	True
Tune In: The Future of AI-Powered Vulnerability Discovery	2026-05-01	72	CrowdStrike	True
Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield	2026-04-30	75	Falcon Shield - Counter Adversary Operations	True
April 2026 Patch Tuesday: Two Zero-Days and Eight Critical Vulnerabilities Among 164 CVEs	2026-04-14	85	Falcon Exposure Management Team	True
STARDUST CHOLLIMA Likely Compromises Axios npm Package	2026-04-01	88	Counter Adversary Operations	True
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse	2026-03-31	75	Yan Linkov	True
Tycoon2FA Phishing-as-a-Service Platform Persists Following Takedown	2026-03-20	78	Falcon Complete Team - Counter Adversary Operations	True
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise	2026-03-20	90	Adam Cardillo - Ben Ellett - Travis Lowe - Radu-Emanuel Chiscariu	True
March 2026 Patch Tuesday: Eight Critical Vulnerabilities and Two Publicly Disclosed Among 82 CVEs Patched	2026-03-10	70	Falcon Exposure Management Team	True
CrowdStrike 2026 Global Threat Report: The Evasive Adversary Wields AI	2026-02-24	90	Adam Meyers	True
February 2026 Patch Tuesday: Six Zero-Days Among 59 CVEs Patched	2026-02-10	88	Falcon Exposure Management Team	True
Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities	2026-02-05	65	Falcon Adversary OverWatch	True
What Security Teams Need to Know About OpenClaw, the AI Super Agent	2026-02-04	70	Elia Zaitsev	True
LABYRINTH CHOLLIMA Evolves into Three Adversaries	2026-01-29	90	Rob Bruner	True
Small Devices, Big Risk: USB Drives Threaten Enterprise Security	2026-01-21	82	Luke Hunsinger - Dana Larson	True
January 2026 Patch Tuesday: 114 CVEs Patched Including 3 Zero-Days	2026-01-13	80	Falcon Exposure Management Team	True
December 2025 Patch Tuesday: One Critical Zero-Day, Two Publicly Disclosed Vulnerabilities Among 57 CVEs	2025-12-09	80	Falcon Exposure Management Team	True
Unveiling WARP PANDA: A New Sophisticated China-Nexus Adversary	2025-12-04	90	Counter Adversary Operations	True
Defeating BLOCKADE SPIDER: How CrowdStrike Stops Cross-Domain Attacks	2025-11-18	75	Chris Prall	True
To Stop AI-Powered Adversaries, Defenders Must Fight Fire with Fire	2025-11-17	90	CrowdStrike	True
November 2025 Patch Tuesday: One Zero-Day and Five Critical Vulnerabilities Among 63 CVEs	2025-11-12	78	Falcon Exposure Management Team	True
CrowdStrike Identifies Campaign Targeting Oracle E-Business Suite via Zero-Day Vulnerability (now tracked as CVE-2025-61882)	2025-10-06	90	Counter Adversary Operations	True
CrowdStrike Falcon Prevents Supply Chain Attack Involving Compromised NPM Packages	2025-07-23	80	Veronica Tecan	True
CrowdStrike Detects and Blocks Initial SharePoint Zero-Day Exploitation	2025-07-21	90	CrowdStrike Engineering	True
CrowdStrike Services Observes SCATTERED SPIDER Escalate Attacks Across Industries	2025-07-02	80	Counter Adversary Operations	True
Prescription for Protection: Healthcare Industry Observations from CrowdStrike Investigations	2025-07-01	75	Yinan Yang - Tim Parisi	True
CrowdStrike Researchers Investigate the Threat of Patchless AMSI Bypass Attacks	2025-06-17	60	Donato Onofri - Liviu Arsene	True
Exposing the Blind Spots: CrowdStrike Research on Feedback-Guided Fuzzing for Comprehensive LLM Testing	2025-06-11	50	Paul-Danut Urian - Mihai-Adrian Tecliceanu - Mihai Maganu - Alexandru Ghita	True
April 2025 Patch Tuesday: One Zero-Day and 11 Critical Vulnerabilities Among 121 CVEs	2025-04-08	88	Falcon Exposure Management Team	True