CrowdStrike

Global – October 31, 2026 -- CrowdStrike has extended Falcon Adversary OverWatch managed threat hunting to AI applications and autonomous agents monitored by Falcon Guardian, and added telemetry-driven hunting for Google Cloud, bringing its coverage of the three major public clouds in line.

OverWatch Cross-Domain now covers AI agent activity around the clock

Falcon Adversary OverWatch Cross-Domain now provides 24/7 proactive hunting across AI applications and agent activity monitored by Falcon Guardian. Hunters combine Guardian's runtime context with Falcon platform telemetry and frontline adversary intelligence to find manipulation, abuse and emerging tradecraft that automated detections may miss.

Global – October 31, 2026 -- CrowdStrike's Falcon Guardian now traces supported AI agent sessions from prompt to impact on the endpoint, scoring every agent from 0 to 100 and blocking dangerous actions at runtime.

The product targets a blind spot in network-based monitoring. A gateway sees the conversation, and a web gateway sees an agent connect to a trusted site. Neither sees what happens inside the machine, where a hidden instruction can become a shell command or a downloaded file can run with the user's access.

Agent Graph links the AI layer to the execution layer

Falcon Guardian runs on the existing CrowdStrike Falcon sensor, which already sees processes, files and network connections. It now also sees prompts, models, tools and skills. CrowdStrike Agent Graph connects each agent to the users, hosts, models, prompts, tools, skills, MCP servers, processes, files and detections it touches, and keeps those links current as agents act.

Global – October 31, 2026 -- The China-nexus adversary VAPOR PANDA used the agentic framework ARTEX to target more than 200 organizations worldwide, according to CrowdStrike OverWatch. The campaign paired the Chinese-developed DeepSeek large language model (LLM) with a second commercial LLM to run intrusions against multiple high-value targets in parallel. CrowdStrike calls it an escalation in China-nexus use of AI agents, from single intrusions to simultaneous engagements directed by one human operator.

Campaign reached at least 14 countries in 11 days

Exploitation activity began on October 17, 2026, from a single ARTEX controller linked to VAPOR PANDA infrastructure. Targets included foreign ministries in Latin America, Europe, Asia and the Middle East. U.S. semiconductor, defense and think tank organizations were also hit, along with telecommunications providers in multiple regions.

Global – October 31, 2026 -- CrowdStrike researchers say they located software vulnerabilities by watching where a frontier AI model refused to answer, and their method was correct in 73 of 86 controlled test scenarios across five vulnerability classes.

The approach, called Guardrail-based Vulnerability Discovery (GbVD), began when a model declined to explain one function in a small C web server. It had explained every other function in the codebase. A single token in that function had been changed from a max to a min, creating an out-of-bounds write. The prompt asked only what the code does, with no mention of security, exploits or vulnerabilities.

United States – October 31, 2026 -- Cyber intrusions targeting the legal sector nearly doubled between 2023 and 2026, according to the CrowdStrike 2026 Legal Threat Landscape Report, as eCrime and nation-state adversaries pursue privileged communications, corporate transactions, intellectual property and financial records.

The report covers activity observed from September 1, 2025 through August 31, 2026. CrowdStrike expects AI advances to let adversaries increase the scale and sophistication of their operations.

Financially motivated actors account for 82% of legal sector activity

Big game hunting adversaries named 455 legal entities on dedicated leak sites, a 39% year-over-year increase. Attackers profit by deploying ransomware or monetizing stolen data through extortion or resale on criminal markets.

Global – October 31, 2026 -- CrowdStrike Counter Adversary Operations has observed no successful exploitation of the PHP2Shell vulnerabilities in the wild or in its honeypot environments, only testing, probing and unsuccessful attempts.

The firm has also found no fully weaponized exploit, and no proof-of-concept (POC) exploit sufficient for widespread exploitation. Opportunistic attackers are likely to favor proven alternatives, because several other vulnerabilities already deliver unauthenticated remote code execution (RCE) against PHP applications reliably and at scale.

PHP disclosed two CVEs affecting four release branches on October 21, 2026

CVE-2026-109618 and CVE-2026-109619 affect PHP versions earlier than 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Preliminary analysis by industry sources and the vendor indicates that many older versions, including end-of-life releases, are also affected and may receive only limited patches.

Las Vegas – October 31, 2026 -- CrowdStrike's Falcon Guardian has been deployed at hundreds of organizations since its September 1, 2026 launch, and early users report finding over 260 distinct AI services at a single organization and confidential documents being shared with public AI chatbots.

Customers span financial services, healthcare, manufacturing, retail, energy and the public sector. They are responding to the shift from AI that generates content to agents that reason, decide and act autonomously. Employees run AI assistants in browsers and desktop apps, developers run coding agents that read files and execute commands, and business teams connect agents to enterprise data through Model Context Protocol (MCP) servers.

Global – October 31, 2026 -- CrowdStrike has expanded its public Prompt Injection Taxonomy to 222 techniques, adding attacks that target how autonomous AI agents plan rather than only what they are prompted to do.

Attackers shape the context agents plan from

An agent breaks a goal into steps, picks tools and executes. Attackers no longer need to push one forbidden request past an input or output filter. They can instead shape the context the agent plans from, so a restricted action looks like the logical next step. Because each step can look benign alone, defenses that check steps in isolation may miss what the full plan adds up to.

Global – October 31, 2026 -- CrowdStrike has added Third-Party IOC Management to Falcon Next-Gen SIEM, letting security teams ingest, curate and manage externally sourced threat indicators in the same platform that holds their security telemetry.

The feature targets a "bring your own intelligence" model. Indicators from commercial providers, ISACs, government sources, open-source research, partners and internal incident response often sit in spreadsheets, ticketing tools and separate threat intelligence platforms. CrowdStrike says manual imports across those tools add operational overhead, delay detection, generate unnecessary alerts and slow investigations.

Ingestion covers IPs, domains, URLs and file hashes via STIX/TAXII, APIs and uploads

Teams can onboard IOCs through STIX/TAXII, APIs or direct uploads. The platform automatically consolidates duplicate indicators across sources.

PALO ALTO – October 29, 2026 -- A single faulty CrowdStrike update in July 2024 cost Fortune 500 companies an estimated $5.4 billion, according to a LITSLINK study that finds updates breaking functionality are a far larger risk than interface changes users dislike.

The software development company examined 12 products. Ten, including Microsoft Teams, Google Workspace and Figma, were assessed through regulatory filings and peer-reviewed research. CrowdStrike and Sonos were examined as the costliest failed updates on record.