Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

See Falcon Seraphic Enterprise Browser in Action

Adversaries are targeting the browser — hijacking sessions, stealing credentials, and exploiting gaps traditional tools can’t see. Watch how CrowdStrike's Falcon Seraphic Enterprise Browser delivers zero trust runtime protection directly in the browser, combining secure access with deep, real-time visibility and control over user activity.

Copy, Paste, Compromised: How ClickFix Attacks Work and How CrowdStrike Stops Them

Consider this hypothetical scenario: An employee tries to join what looks like a routine video meeting. The page loads, but instead of the meeting, they see an error message along with a helpful fix: Copy the provided command, open the Windows Run dialog, paste it, and press Enter. The meeting never starts. The command does something else entirely. This is ClickFix, a social engineering technique that turns the victim into the mechanism for executing an attack.

See Falcon Seraphic Enterprise Browser in Action

Adversaries are targeting the browser — hijacking sessions, stealing credentials, and exploiting gaps traditional tools can’t see. Watch how CrowdStrike's Falcon Seraphic Enterprise Browser delivers zero trust runtime protection directly in the browser, combining secure access with deep, real-time visibility and control over user activity.

A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack

AI agents are already operating across the enterprise. As they become more autonomous in accessing data, using credentials, executing code, and acting across critical systems, the security boundary is changing with them. The question is no longer whether enterprises will adopt agents. It's how they give agents greater autonomy without giving up control.

Lightboard Lab: Why Falcon Seraphic Enterprise Browser

Work no longer happens inside a clearly defined perimeter. It happens in the browser, where users access SaaS applications, private resources, sensitive data, and AI tools from managed devices, personal devices, and contractor environments. Traditional security controls were designed to inspect traffic at the network edge. But they often lack visibility into what happens inside the browser after access is granted, including copy and paste, uploads, downloads, screenshots, risky extensions, session activity, and AI.

Falcon for IT: Collapse the Gap - From Exposure to Remediation

Adversaries are moving faster than ever, exploiting vulnerabilities soon after they’re discovered. As frontier AI accelerates reconnaissance and exploit development, Security and IT teams need to identify endpoint risk and act before exposure becomes compromise. Meet Falcon for IT, a solution that helps teams uncover emerging risk, establish operational control, and accelerate targeted remediation across the endpoint fleet.

China's 15th Five-Year Plan: What You Need to Know

Over the past several decades, China’s five-year plan has provided a roadmap to the country's innovation and economic growth. It details what China is interested in, where technology is evolving, and what it plans to target, including the highest-priority verticals. “It’s their shopping list,” as Adam puts it. His team does a deep analysis on these plans, including information published adjacent to it and the discrepancies across various languages.

CrowdStrike Named a Leader in The Forrester Wave: Proactive Security Platforms, Q3 2026

CrowdStrike has been named a Leader in The Forrester Wave: Proactive Security Platforms, Q3 2026. We received the highest Strategy category score in the evaluation and maximum scores in both the Innovation and Roadmap criteria. This evaluation reflects how the market is evolving. Proactive security is moving beyond traditional vulnerability management.

Extend Investigations with Falcon Next-Gen SIEM Federated Search and Snowflake

See how CrowdStrike Falcon Next-Gen SIEM Federated Search extends investigations to security data stored in Snowflake without requiring the entire dataset to be ingested into the SIEM. In this demo, an analyst pivots from suspicious endpoint activity in Falcon to Corelight network telemetry retained in Snowflake. Using remoteTable(), the analyst searches the remote data directly from Advanced Event Search, retrieving only the context needed to investigate the affected host and understand the broader scope of the incident.

CrowdStrike SafeMind: When the Best Offense Builds the Best Defense

The conventional approach to AI-powered security is to build an offensive agent to find weaknesses, build a defensive agent to catch threats, and run them in separate tracks. It's a clean division of labor that produces capable tools. However, the conventional approach also produces a permanent blind spot — the defense is never trained against the actual offense, and the connective tissue between the two is manual, slow, and fragile.

CrowdStrike Accelerates Real-Time Data Classification with On-Device AI

Modern data security depends on understanding sensitive data as it is created, accessed, and moved in real time directly on the endpoint. In addition to identifying predefined patterns such as credit card numbers or Social Security numbers, organizations must protect unstructured information including documents, chat logs, support tickets, AI prompts, medical records, and free-text fields.

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

CrowdStrike Counter Adversary Operations identified a financially motivated threat actor who works as a bug bounty hunter and who developed and distributed the JavaScript (JS)-based information stealer PhantomRaven via npm, a platform on which developers can access open-source packages to build applications and software.

Inside Agents of Chaos | Playthrough with a CrowdStrike Security Researcher

Watch Joey Melo, Principal Security Researcher at CrowdStrike, take on AI Unlocked: Agents of Chaos and see how he approaches the challenges, manipulates autonomous AI agents and works his way through the game. Now it’s your turn. All three acts are open, with increasingly difficult challenges waiting. Put your skills to the test, climb the global leaderboard and compete for a share of up to $100,000 in cash prizes.*

Preparing for an AI-Powered Future with Amazon CSO Steve Schmidt

Steve Schmidt, SVP and CSO at Amazon, sees firsthand how both defenders and adversaries are using AI to their advantage. In this episode, he joins Adam and Cristian to discuss modern AI models, evolving adversary behavior, and how Amazon is responding to shifts in the threat landscape. “The big change we’ve seen recently is the ability of models to chain things together to produce something interesting,” Steve says. As AI models grow more adept at automatically chaining and acting, he adds, the time to respond has dramatically decreased.

CrowdStrike Falcon Guardian: Secure AI Agents Where They Execute

CrowdStrike Falcon Guardian secures AI agents where they execute, delivering runtime visibility, governance and protection through the CrowdStrike Falcon platform. Falcon Guardian continuously discovers AI agents, connects AI activity to downstream endpoint execution for prompt-to-impact visibility, helps security teams investigate threats and determine blast radius, and enables response before threats spread. It also builds on proven AI security capabilities for Shadow AI discovery, AI governance, sensitive data protection and defense against AI-specific attacks.

Falcon Next-Gen Identity Security: Agentic Identity Provider

CrowdStrike delivers the next evolution of the agentic SOC on the Falcon platform: coordinated teams of expert agents that investigate endpoint, identity, SaaS, cloud, and network domains simultaneously, converging on a single, evidence-backed verdict your team can trust.

CrowdStrike Delivers the Next Evolution of the Agentic SOC

The average adversary breakout time is now 29 minutes, with the fastest recorded at 27 seconds, according to the CrowdStrike 2026 Global Threat Report. AI is supercharging the adversary playbook, empowering many to move faster across multiple domains. Defenders must match that speed with AI-driven security operations that investigate and respond across every domain, in real time.

CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks

Software supply chain attacks pose a critical enterprise threat. In the first half of 2026, these attacks increasingly used malicious software packages uploaded to public software registries, the CrowdStrike 2026 Threat Hunting Report found. Adversaries are poisoning open-source packages and exploiting the same dependencies that AI-assisted development tools and agentic applications pull onto enterprise endpoints every day.

Peer Pressure: Inside the Sality Botnet Disruption Operation

On August 31, 2026, CrowdStrike's Counter Adversary Operations team, in collaboration with international law enforcement and industry partners, executed a coordinated disruption of the Sality peer-to-peer (P2P) botnet, a criminal infrastructure that has operated with seeming impunity for more than two decades. The botnet enabled the operator to distribute malicious payloads to over 15,000 infected machines worldwide.

CrowdStrike Falcon Guardian Defines the Next Generation of AI Security

AI has rapidly evolved into a technology that takes action. AI agents can reason, access enterprise systems, and execute tasks autonomously at machine speed, often with the full permissions of the users they serve. As these agents proliferate across the enterprise, organizations need to understand where they operate, what they do, what they can access, and how to stop threats before they become breaches. This shift demands a new approach to AI security.