[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:crowdstrike":3},{"vendor":4,"products":15,"links":104,"research":122,"news":175,"iocs":223,"iocs_total":254,"activity":255},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"crowdstrike","CrowdStrike","crowdstrike.com","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002F","US","Security company known for its Falcon endpoint platform, with identity, cloud and managed services, and a large threat intelligence team.","\u002Fvendor-logos\u002Fcrowdstrike.png","#fc0000","CrowdStrike is a global cybersecurity leader with an advanced cloud-native platform for protecting endpoints, cloud workloads, identities and data.","2026-10-16T13:44:11.313314+00:00",[16,27,38,49,60,71,82,93],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.","Stop breaches with pioneering detection and response for endpoint and beyond with AI-Native XDR solution CrowdStrike Falcon Insight XDR.",[23],{"slug":24,"name":25,"problem":26},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":28,"name":29,"url":30,"description":31,"pitch":32,"pitch_source_url":30,"controls":33},"falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.","Protect hybrid identities with CrowdStrike Falcon Identity Protection. Leverage AI-driven detection, response, and zero standing privilege access control.",[34],{"slug":35,"name":36,"problem":37},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":39,"name":40,"url":41,"description":42,"pitch":43,"pitch_source_url":41,"controls":44},"falcon-complete","Falcon Complete","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Ffalcon-complete-mdr\u002F","Managed detection and response run by CrowdStrike's own analysts.","Stop today’s toughest and most advanced threats with CrowdStrike Falcon Complete.",[45],{"slug":46,"name":47,"problem":48},"managed-detection-response","Managed detection and response (MDR)","A team watches and responds around the clock when you cannot.",{"slug":50,"name":51,"url":52,"description":53,"pitch":54,"pitch_source_url":52,"controls":55},"falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.","See and secure everything across your clouds, your applications, and your data with CrowdStrike Falcon Cloud Security.",[56],{"slug":57,"name":58,"problem":59},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":61,"name":62,"url":63,"description":64,"pitch":65,"pitch_source_url":63,"controls":66},"falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.","Falcon Shield delivers AI-powered breach protection with fully managed detection, response, and threat hunting across endpoint, identity, and cloud.",[67],{"slug":68,"name":69,"problem":70},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",{"slug":72,"name":73,"url":74,"description":75,"pitch":76,"pitch_source_url":74,"controls":77},"incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.","CrowdStrike’s Incident Response Services work collaboratively with organizations to handle critical security incidents to resolve cyberattacks.",[78],{"slug":79,"name":80,"problem":81},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",{"slug":83,"name":84,"url":85,"description":86,"pitch":87,"pitch_source_url":85,"controls":88},"falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.","Know your adversary and stop breaches with the industry’s only unified intelligence and hunting team built to disrupt adversaries.",[89],{"slug":90,"name":91,"problem":92},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":94,"name":95,"url":96,"description":97,"pitch":98,"pitch_source_url":96,"controls":99},"falcon-onum","Falcon Onum","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-siem\u002Ffalcon-onum\u002F","Real-time telemetry pipeline from CrowdStrike's purchase of Onum. It filters and streams data into Falcon Next-Gen SIEM and can run detections on third-party data before it is stored.","The real-time data pipeline for the agentic SOC. Falcon Onum collects, filters, enriches, and routes real-time telemetry across Falcon and third-party security tools.",[100],{"slug":101,"name":102,"problem":103},"log-management","Log management and security data pipelines","Security logs are so expensive to collect and keep that teams drop the ones they need when an incident happens.",[105,109,113,116,119],{"kind":106,"label":107,"url":108},"research","CrowdStrike blog","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fblog\u002F",{"kind":110,"label":111,"url":112},"review","SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"kind":110,"label":114,"url":115},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"kind":110,"label":117,"url":118},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"kind":110,"label":120,"url":121},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",{"total":123,"stories":124},49,[125,130,135,140,145,150,155,160,165,170],{"slug":126,"title":127,"published_at":128,"brief":129},"artex-attackers-adopted-this-ai-pentesting-tool-in-three-months-leaked-secrets-a-8d732f","ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.","2026-11-13T15:22:30+00:00","Attackers are using the AI pentesting tool ARTEX, with leaked secrets providing the fastest entry.",{"slug":131,"title":132,"published_at":133,"brief":134},"inside-artex-ai-hacking-tools-exposed-servers-and-south-korean-bank-breaches-162e2e","Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches","2026-11-07T19:56:18+00:00","ARTEX AI hacking tools used in South Korean bank breaches affecting 67k people and 2.2k corporations.",{"slug":136,"title":137,"published_at":138,"brief":139},"ai-agents-scale-and-speed-up-chinese-linked-attacks-1fba9f","AI agents scale and speed up Chinese-linked attacks","2026-11-03T12:31:59+00:00","China-linked groups leverage AI agents for espionage, accelerating attacks on organizations globally.",{"slug":141,"title":142,"published_at":143,"brief":144},"chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs-6c6aea","Chinese hackers use ARTEX AI in automated attacks against 200 orgs","2026-11-02T21:40:14+00:00","Chinese hackers leverage ARTEX AI framework in automated attacks against over 200 organizations.",{"slug":146,"title":147,"published_at":148,"brief":149},"china-backed-threat-group-used-agentic-ai-pentesting-tool-to-compromise-140-sens-080367","China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days","2026-10-30T21:30:00+00:00","China-backed Vapor Panda uses AI pentesting tool ARTEX to compromise 140 targets in 11 days.",{"slug":151,"title":152,"published_at":153,"brief":154},"chinese-hackers-used-vmware-esx-zero-day-php2shell-and-fragnesia-chained-to-root-ff5b24","Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls","2026-10-29T16:25:10+00:00","Chinese hackers exploit VMware ESX zero-day and chain Linux kernel bugs to root servers and firewalls.",{"slug":156,"title":157,"published_at":158,"brief":159},"the-rise-of-agentic-attacks-what-they-look-like-and-where-they-re-headed-1145d7","The Rise of Agentic Attacks: What They Look Like, and Where They're Headed","2026-10-29T14:26:22+00:00","AI agents are increasingly used in cyberattacks, automating reconnaissance and exploitation.",{"slug":161,"title":162,"published_at":163,"brief":164},"chinese-hackers-quietly-used-low-severity-esxi-logging-flaw-as-zero-day-6fa958","Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day","2026-10-29T08:01:05+00:00","Chinese hackers exploit VMware ESXi logging flaw as zero-day.",{"slug":166,"title":167,"published_at":168,"brief":169},"china-linked-hackers-exploited-vmware-esx-zero-day-to-reduce-audit-trail-visibil-48f467","China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility","2026-10-29T06:22:33+00:00","China-linked hackers exploit VMware ESX zero-day, CVE-2026-41709, targeting US legal sector.",{"slug":171,"title":172,"published_at":173,"brief":174},"ai-guardrails-aren-t-stopping-criminal-hackers-d16d77","AI Guardrails Aren’t Stopping Criminal Hackers","2026-10-21T14:00:00+00:00","Hackers are using agentic AI, like Anthropic's Claude, to bypass safeguards and conduct cyberattacks.",{"total":176,"stories":177},9,[178,183,188,193,198,203,208,213,218],{"slug":179,"title":180,"published_at":181,"brief":182},"happy-birthday-shai-hulud-58c7a2","Happy Birthday, Shai-Hulud","2026-09-18T18:46:45.889+00:00","Shai-Hulud npm worm anniversary highlights year of supply chain attacks and arrests.",{"slug":184,"title":185,"published_at":186,"brief":187},"nightmare-eclipse-drops-crowdstrike-nvidia-avast-zero-day-exploits-15087a","Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits","2026-09-07T12:15:57+00:00","Nightmare Eclipse drops three zero-day exploits targeting Avast, CrowdStrike, and Nvidia products.",{"slug":189,"title":190,"published_at":191,"brief":192},"new-crowdstrike-falconflank-zero-day-grants-system-privileges-beea4d","New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges","2026-09-04T13:22:01+00:00","CrowdStrike Falcon zero-day 'FalconFlank' allows SYSTEM privilege escalation on Windows.",{"slug":194,"title":195,"published_at":196,"brief":197},"researcher-releases-falconflank-poc-showing-privilege-escalation-in-crowdstrike--21d7fb","Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon","2026-09-03T06:26:59+00:00","Researcher releases FalconFlank PoC, a zero-day privilege escalation flaw in CrowdStrike Falcon.",{"slug":199,"title":200,"published_at":201,"brief":202},"macos-flaw-allowed-standard-users-to-disable-crowdstrike-and-kandji-security-too-f960ab","macOS Flaw Allowed Standard Users to Disable CrowdStrike and Kandji Security Tools","2026-06-26T12:43:05+00:00","macOS XPC flaw enabled standard users to disable CrowdStrike and Kandji security tools.",{"slug":204,"title":205,"published_at":206,"brief":207},"macos-weaknesses-chained-to-silently-disable-endpoint-security-agents-53a492","macOS Weaknesses Chained to Silently Disable Endpoint Security Agents","2026-06-24T13:50:53+00:00","macOS attack chain allows non-admin users to disable endpoint security agents.",{"slug":209,"title":210,"published_at":211,"brief":212},"gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses-42866a","Gentlemen ransomware uses multiple EDR killers to disable defenses","2026-06-18T22:31:52+00:00","Gentlemen ransomware uses multiple EDR killers to disable defenses.",{"slug":214,"title":215,"published_at":216,"brief":217},"attackers-use-ai-to-automate-edr-evasion-testing-39a733","Attackers Use AI to Automate EDR Evasion Testing","2026-06-03T21:34:07+00:00","Attackers automate EDR evasion testing using Python scripts against major endpoint security products.",{"slug":219,"title":220,"published_at":221,"brief":222},"vulnerabilities-patched-in-crowdstrike-tenable-products-ed9a44","Vulnerabilities Patched in CrowdStrike, Tenable Products","2026-04-24T09:49:27+00:00","CrowdStrike patches critical LogScale path traversal; Tenable fixes high-severity Nessus Windows flaw.",[224,227,229,231,234,237,238,240,242,244,246,248,250,252],{"type":225,"value":226,"article_slug":179,"article_title":180,"published_at":181},"malware","Mini Shai-Hulud",{"type":225,"value":228,"article_slug":179,"article_title":180,"published_at":181},"Sha1-Hulud: The Second Coming",{"type":225,"value":230,"article_slug":179,"article_title":180,"published_at":181},"Shai-Hulud",{"type":232,"value":233,"article_slug":179,"article_title":180,"published_at":181},"url","https:\u002F\u002Fgithub.com\u002FTeamPCP\u002FShai-Hulud",{"type":235,"value":236,"article_slug":199,"article_title":200,"published_at":201},"cve","CVE-2026-39118",{"type":235,"value":236,"article_slug":204,"article_title":205,"published_at":206},{"type":225,"value":239,"article_slug":209,"article_title":210,"published_at":211},"GentleKiller",{"type":225,"value":241,"article_slug":209,"article_title":210,"published_at":211},"HavocKiller",{"type":225,"value":243,"article_slug":209,"article_title":210,"published_at":211},"HexKiller",{"type":225,"value":245,"article_slug":209,"article_title":210,"published_at":211},"OxideHarvest",{"type":225,"value":247,"article_slug":209,"article_title":210,"published_at":211},"SystemBC",{"type":225,"value":249,"article_slug":209,"article_title":210,"published_at":211},"ThrottleBlood",{"type":235,"value":251,"article_slug":219,"article_title":220,"published_at":221},"CVE-2026-33694",{"type":235,"value":253,"article_slug":219,"article_title":220,"published_at":221},"CVE-2026-40050",14,[256,260,263,266,269,272],{"month":257,"reported":258,"affected":259},"2026-06-01",3,4,{"month":261,"reported":259,"affected":262},"2026-07-01",0,{"month":264,"reported":265,"affected":262},"2026-08-01",2,{"month":267,"reported":268,"affected":259},"2026-09-01",6,{"month":270,"reported":271,"affected":262},"2026-10-01",11,{"month":273,"reported":268,"affected":262},"2026-11-01"]