Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike

Why Organizations Secure AI Agents with Falcon Guardian

Oct 23, 2026 By Vanessa Villa In CrowdStrike
AI is changing from a tool that generates content into agents that reason, decide, and take autonomous action. Employees now use AI assistants in their browsers and desktop apps. Developers run coding agents that read files and execute commands on their machines. Business teams build agents and connect them to enterprise data through Model Context Protocol (MCP) servers. This shift from asking AI to tasking AI creates hard questions for security teams: Which AI agents are operating in the environment?
Read Post
CrowdStrike

CrowdStrike Protects Customers from Threats Delivered via PHP2Shell

Oct 21, 2026 By Amit Serper In CrowdStrike
Two critical memory-corruption remote code execution (RCE) vulnerabilities, collectively dubbed PHP2Shell, have been disclosed in core PHP, the underlying engine powering a vast portion of the web. The CrowdStrike Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of both vulnerabilities.
Read Post
CrowdStrike

CrowdStrike Uncovers New Agentic AI Campaigns

Oct 21, 2026 By CrowdStrike Counter Adversary Operations In CrowdStrike
A new report from the CrowdStrike Counter Adversary Operations team details research into four previously unreported threat actors, each of whom left their offensive agent frameworks exposed via open directories. In doing so, they shared detailed insight into their use of AI agents and revealed how adversaries are quickly becoming more proficient in AI.
Read Post
CrowdStrike

CrowdStrike Achieves NCSC CIR Enhanced Level Assurance

Oct 20, 2026 By Max Gebhardt In CrowdStrike
Some cyber incidents leave no margin for error, whether that's an attack that interrupts energy, water, or financial services, or a breach that triggers reporting obligations in several jurisdictions within hours. The UK National Cyber Security Centre (NCSC) created the Enhanced Level of its Cyber Incident Response (CIR) scheme for incidents like these. It recognizes providers that meet rigorous standards for high-quality incident response, at the highest level of risk.
Read Post

Inside the Cyber Superintelligence Lab with CrowdStrike's Bartley Richardson

Oct 16, 2026 By CrowdStrike In CrowdStrike
Bartley Richardson, Chief AI and Autonomous Systems Officer at CrowdStrike, recently took the stage at Fal.Con 2026 to announce CrowdStrike’s Cyber Superintelligence Lab. The lab brings together our AI researchers, offensive operators, and incident responders to build defensive model and harness capabilities for the agentic era. How are they doing it? “To build the best defense, you have to understand the best offense,” Bartley says.
View Video

Falcon Guardian: Claude Code Hooks

Oct 16, 2026 By CrowdStrike In CrowdStrike
Claude Code reads your developers' files and runs commands in their shell. A Social Security number pasted into a prompt or an API key in a.env file can reach the model, and a single force push can overwrite a shared branch. This demo shows how to secure Claude Code with CrowdStrike Falcon Guardian. Claude Code Hooks run a check at set points, such as when a developer submits a prompt or before a tool runs. Falcon Guardian uses those hooks to check prompts and tool calls against a central policy, deployed through Claude Code's managed settings file so developers can't override it.
View Video

Falcon Guardian: Claude Code Hooks Demo Drill-Down

Oct 15, 2026 By CrowdStrike In CrowdStrike
Claude Code reads your developers' files and runs commands in their shell. A Social Security number pasted into a prompt or an API key in a.env file can reach the model, and a single force push can overwrite a shared branch. This demo shows how to secure Claude Code with CrowdStrike Falcon Guardian. Claude Code Hooks run a check at set points, such as when a developer submits a prompt or before a tool runs. Falcon Guardian uses those hooks to check prompts and tool calls against a central policy, deployed through Claude Code's managed settings file so developers can't override it.
View Video
CrowdStrike

U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance

Oct 13, 2026 By CrowdStrike Counter Adversary Operations In CrowdStrike
In late September, 2026, CrowdStrike's Counter Adversary Operations team collaborated with the United States Federal Bureau of Investigation (FBI) to disrupt several laptop farms operating across the U.S. maintained by DPRK-nexus adversary FAMOUS CHOLLIMA to fraudulently employ operatives at American companies while concealing their true location and identity.
Read Post

Connect and Validate Third-Party Data with Falcon Next-Gen SIEM

Oct 9, 2026 By CrowdStrike In CrowdStrike
See how the Falcon Next-Gen SIEM Data Onboarding Agent simplifies the process of connecting and validating third-party security data. Using natural language, teams can identify the right connector, understand setup requirements, configure credentials, and create connections through a guided workflow.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.