[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:crowdstrike":3},{"vendor":4,"products":15,"links":104,"research":122,"news":175,"iocs":223,"iocs_total":254,"activity":255},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"crowdstrike","CrowdStrike","crowdstrike.com","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002F","US","Security company known for its Falcon endpoint platform, with identity, cloud and managed services, and a large threat intelligence team.","\u002Fvendor-logos\u002Fcrowdstrike.png","#fc0000","CrowdStrike is a global cybersecurity leader with an advanced cloud-native platform for protecting endpoints, cloud workloads, identities and data.","2026-10-16T13:44:11.313314+00:00",[16,27,38,49,60,71,82,93],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.","Stop breaches with pioneering detection and response for endpoint and beyond with AI-Native XDR solution CrowdStrike Falcon Insight XDR.",[23],{"slug":24,"name":25,"problem":26},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":28,"name":29,"url":30,"description":31,"pitch":32,"pitch_source_url":30,"controls":33},"falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.","Protect hybrid identities with CrowdStrike Falcon Identity Protection. Leverage AI-driven detection, response, and zero standing privilege access control.",[34],{"slug":35,"name":36,"problem":37},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":39,"name":40,"url":41,"description":42,"pitch":43,"pitch_source_url":41,"controls":44},"falcon-complete","Falcon Complete","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Ffalcon-complete-mdr\u002F","Managed detection and response run by CrowdStrike's own analysts.","Stop today’s toughest and most advanced threats with CrowdStrike Falcon Complete.",[45],{"slug":46,"name":47,"problem":48},"managed-detection-response","Managed detection and response (MDR)","A team watches and responds around the clock when you cannot.",{"slug":50,"name":51,"url":52,"description":53,"pitch":54,"pitch_source_url":52,"controls":55},"falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.","See and secure everything across your clouds, your applications, and your data with CrowdStrike Falcon Cloud Security.",[56],{"slug":57,"name":58,"problem":59},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":61,"name":62,"url":63,"description":64,"pitch":65,"pitch_source_url":63,"controls":66},"falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.","Falcon Shield delivers AI-powered breach protection with fully managed detection, response, and threat hunting across endpoint, identity, and cloud.",[67],{"slug":68,"name":69,"problem":70},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",{"slug":72,"name":73,"url":74,"description":75,"pitch":76,"pitch_source_url":74,"controls":77},"incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.","CrowdStrike’s Incident Response Services work collaboratively with organizations to handle critical security incidents to resolve cyberattacks.",[78],{"slug":79,"name":80,"problem":81},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",{"slug":83,"name":84,"url":85,"description":86,"pitch":87,"pitch_source_url":85,"controls":88},"falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.","Know your adversary and stop breaches with the industry’s only unified intelligence and hunting team built to disrupt adversaries.",[89],{"slug":90,"name":91,"problem":92},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":94,"name":95,"url":96,"description":97,"pitch":98,"pitch_source_url":96,"controls":99},"falcon-onum","Falcon Onum","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-siem\u002Ffalcon-onum\u002F","Real-time telemetry pipeline from CrowdStrike's purchase of Onum. It filters and streams data into Falcon Next-Gen SIEM and can run detections on third-party data before it is stored.","The real-time data pipeline for the agentic SOC. Falcon Onum collects, filters, enriches, and routes real-time telemetry across Falcon and third-party security tools.",[100],{"slug":101,"name":102,"problem":103},"log-management","Log management and security data pipelines","Security logs are so expensive to collect and keep that teams drop the ones they need when an incident happens.",[105,109,113,116,119],{"kind":106,"label":107,"url":108},"research","CrowdStrike blog","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fblog\u002F",{"kind":110,"label":111,"url":112},"review","SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"kind":110,"label":114,"url":115},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"kind":110,"label":117,"url":118},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"kind":110,"label":120,"url":121},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",{"total":123,"stories":124},36,[125,130,135,140,145,150,155,160,165,170],{"slug":126,"title":127,"published_at":128,"brief":129},"fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested-f52984","FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested","2026-10-14T19:41:43+00:00","FBI raids DPRK IT worker laptop farms in Texas, arrests US nationals.",{"slug":131,"title":132,"published_at":133,"brief":134},"us-arrests-two-in-crackdown-on-north-korean-it-worker-laptop-farms-2a2907","US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms","2026-10-14T10:55:21+00:00","US arrests two in crackdown on North Korean IT worker laptop farms.",{"slug":136,"title":137,"published_at":138,"brief":139},"artex-ai-claude-agents-used-in-cyberattacks-on-south-korean-banks-c1d059","ARTEX AI, Claude agents used in cyberattacks on South Korean banks","2026-10-10T14:16:17+00:00","Chinese hacker uses ARTEX AI and Claude agents to attack South Korean banks.",{"slug":141,"title":142,"published_at":143,"brief":144},"artex-ai-pentesting-tool-used-in-data-theft-attacks-on-south-korean-financial-fi-50bd0e","ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms","2026-10-08T14:12:34+00:00","ARTEX AI pentesting tool used in data theft attacks on South Korean financial firms",{"slug":146,"title":147,"published_at":148,"brief":149},"in-other-news-ransomware-developer-sentenced-plugin4shell-ai-attack-critical-sap-e0ab0e","In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw","2026-09-18T14:25:00+00:00","Ransomware developer sentenced, AI agents used in attacks, and critical SAP flaw disclosed.",{"slug":151,"title":152,"published_at":153,"brief":154},"claimed-bug-bounty-hunter-likely-used-llm-to-build-phantomraven-npm-stealer-1963d1","Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer","2026-09-18T09:18:03+00:00","npm stealer PhantomRaven likely developed with LLM by bug bounty hunter.",{"slug":156,"title":157,"published_at":158,"brief":159},"slim-spider-steals-crypto-custody-secrets-from-brazilian-financial-institution-08a6dd","Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution","2026-09-08T16:20:23+00:00","Slim Spider targets Brazilian financial institutions with sophisticated cloud attacks.",{"slug":161,"title":162,"published_at":163,"brief":164},"dogged-russia-based-botnet-dismantled-after-23-year-run-273394","Dogged Russia-based botnet dismantled after 23-year run","2026-09-02T17:03:58+00:00","Russia-based Sality botnet dismantled after 23-year run infecting 11M+ devices.",{"slug":166,"title":167,"published_at":168,"brief":169},"23-year-old-sality-p2p-botnet-disrupted-6a5925","23-Year-Old Sality P2P Botnet Disrupted","2026-09-02T08:38:00+00:00","23-year-old Sality P2P botnet disrupted by international law enforcement effort.",{"slug":171,"title":172,"published_at":173,"brief":174},"sality-botnet-infrastructure-dismantled-in-joint-global-takedown-db2015","Sality botnet infrastructure dismantled in joint global takedown","2026-09-02T08:00:43+00:00","Global law enforcement and private partners dismantle the Sality botnet after two decades of operation.",{"total":176,"stories":177},9,[178,183,188,193,198,203,208,213,218],{"slug":179,"title":180,"published_at":181,"brief":182},"happy-birthday-shai-hulud-58c7a2","Happy Birthday, Shai-Hulud","2026-09-18T18:46:45.889+00:00","Shai-Hulud npm worm anniversary highlights year of supply chain attacks and arrests.",{"slug":184,"title":185,"published_at":186,"brief":187},"nightmare-eclipse-drops-crowdstrike-nvidia-avast-zero-day-exploits-15087a","Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits","2026-09-07T12:15:57+00:00","Nightmare Eclipse drops three zero-day exploits targeting Avast, CrowdStrike, and Nvidia products.",{"slug":189,"title":190,"published_at":191,"brief":192},"new-crowdstrike-falconflank-zero-day-grants-system-privileges-beea4d","New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges","2026-09-04T13:22:01+00:00","CrowdStrike Falcon zero-day 'FalconFlank' allows SYSTEM privilege escalation on Windows.",{"slug":194,"title":195,"published_at":196,"brief":197},"researcher-releases-falconflank-poc-showing-privilege-escalation-in-crowdstrike--21d7fb","Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon","2026-09-03T06:26:59+00:00","Researcher releases FalconFlank PoC, a zero-day privilege escalation flaw in CrowdStrike Falcon.",{"slug":199,"title":200,"published_at":201,"brief":202},"macos-flaw-allowed-standard-users-to-disable-crowdstrike-and-kandji-security-too-f960ab","macOS Flaw Allowed Standard Users to Disable CrowdStrike and Kandji Security Tools","2026-06-26T12:43:05+00:00","macOS XPC flaw enabled standard users to disable CrowdStrike and Kandji security tools.",{"slug":204,"title":205,"published_at":206,"brief":207},"macos-weaknesses-chained-to-silently-disable-endpoint-security-agents-53a492","macOS Weaknesses Chained to Silently Disable Endpoint Security Agents","2026-06-24T13:50:53+00:00","macOS attack chain allows non-admin users to disable endpoint security agents.",{"slug":209,"title":210,"published_at":211,"brief":212},"gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses-42866a","Gentlemen ransomware uses multiple EDR killers to disable defenses","2026-06-18T22:31:52+00:00","Gentlemen ransomware uses multiple EDR killers to disable defenses.",{"slug":214,"title":215,"published_at":216,"brief":217},"attackers-use-ai-to-automate-edr-evasion-testing-39a733","Attackers Use AI to Automate EDR Evasion Testing","2026-06-03T21:34:07+00:00","Attackers automate EDR evasion testing using Python scripts against major endpoint security products.",{"slug":219,"title":220,"published_at":221,"brief":222},"vulnerabilities-patched-in-crowdstrike-tenable-products-ed9a44","Vulnerabilities Patched in CrowdStrike, Tenable Products","2026-04-24T09:49:27+00:00","CrowdStrike patches critical LogScale path traversal; Tenable fixes high-severity Nessus Windows flaw.",[224,227,229,231,234,237,238,240,242,244,246,248,250,252],{"type":225,"value":226,"article_slug":179,"article_title":180,"published_at":181},"malware","Mini Shai-Hulud",{"type":225,"value":228,"article_slug":179,"article_title":180,"published_at":181},"Sha1-Hulud: The Second Coming",{"type":225,"value":230,"article_slug":179,"article_title":180,"published_at":181},"Shai-Hulud",{"type":232,"value":233,"article_slug":179,"article_title":180,"published_at":181},"url","https:\u002F\u002Fgithub.com\u002FTeamPCP\u002FShai-Hulud",{"type":235,"value":236,"article_slug":199,"article_title":200,"published_at":201},"cve","CVE-2026-39118",{"type":235,"value":236,"article_slug":204,"article_title":205,"published_at":206},{"type":225,"value":239,"article_slug":209,"article_title":210,"published_at":211},"GentleKiller",{"type":225,"value":241,"article_slug":209,"article_title":210,"published_at":211},"HavocKiller",{"type":225,"value":243,"article_slug":209,"article_title":210,"published_at":211},"HexKiller",{"type":225,"value":245,"article_slug":209,"article_title":210,"published_at":211},"OxideHarvest",{"type":225,"value":247,"article_slug":209,"article_title":210,"published_at":211},"SystemBC",{"type":225,"value":249,"article_slug":209,"article_title":210,"published_at":211},"ThrottleBlood",{"type":235,"value":251,"article_slug":219,"article_title":220,"published_at":221},"CVE-2026-33694",{"type":235,"value":253,"article_slug":219,"article_title":220,"published_at":221},"CVE-2026-40050",14,[256,260,264,266,269,272],{"month":257,"reported":258,"affected":259},"2026-05-01",8,0,{"month":261,"reported":262,"affected":263},"2026-06-01",3,4,{"month":265,"reported":263,"affected":259},"2026-07-01",{"month":267,"reported":268,"affected":259},"2026-08-01",2,{"month":270,"reported":271,"affected":263},"2026-09-01",6,{"month":273,"reported":263,"affected":259},"2026-10-01"]