BOSTON – November 02, 2026 -- Black Kite says its new CrowdStrike integration cuts third-party incident response times by 5x by moving vendor risk intelligence natively into Falcon Next-Gen SIEM.

The integration correlates external vendor risk signals with internal telemetry on the platform security operations centers (SOCs) already use. Black Kite says SOC teams handle tens of thousands of inbound signals daily but cannot detect third-party ransomware risk in real time or act on vendor incidents within existing workflows.

Las Vegas – October 31, 2026 -- CrowdStrike's Falcon Guardian has been deployed at hundreds of organizations since its September 1, 2026 launch, and early users report finding over 260 distinct AI services at a single organization and confidential documents being shared with public AI chatbots.

Global – October 31, 2026 -- CrowdStrike Counter Adversary Operations has observed no successful exploitation of the PHP2Shell vulnerabilities in the wild or in its honeypot environments, only testing, probing and unsuccessful attempts.

United States – October 31, 2026 -- Cyber intrusions targeting the legal sector nearly doubled between 2023 and 2026, according to the CrowdStrike 2026 Legal Threat Landscape Report, as eCrime and nation-state adversaries pursue privileged communications, corporate transactions, intellectual property and financial records.

The report covers activity observed from September 1, 2025 through August 31, 2026. CrowdStrike expects AI advances to let adversaries increase the scale and sophistication of their operations.

Global – October 31, 2026 -- CrowdStrike researchers say they located software vulnerabilities by watching where a frontier AI model refused to answer, and their method was correct in 73 of 86 controlled test scenarios across five vulnerability classes.

Global – October 31, 2026 -- CrowdStrike has expanded its public Prompt Injection Taxonomy to 222 techniques, adding attacks that target how autonomous AI agents plan rather than only what they are prompted to do.

Global – October 31, 2026 -- The China-nexus adversary VAPOR PANDA used the agentic framework ARTEX to target more than 200 organizations worldwide, according to CrowdStrike OverWatch. The campaign paired the Chinese-developed DeepSeek large language model (LLM) with a second commercial LLM to run intrusions against multiple high-value targets in parallel. CrowdStrike calls it an escalation in China-nexus use of AI agents, from single intrusions to simultaneous engagements directed by one human operator.

Global – October 31, 2026 -- CrowdStrike's Falcon Guardian now traces supported AI agent sessions from prompt to impact on the endpoint, scoring every agent from 0 to 100 and blocking dangerous actions at runtime.

The product targets a blind spot in network-based monitoring. A gateway sees the conversation, and a web gateway sees an agent connect to a trusted site. Neither sees what happens inside the machine, where a hidden instruction can become a shell command or a downloaded file can run with the user's access.

Global – October 31, 2026 -- CrowdStrike has added Third-Party IOC Management to Falcon Next-Gen SIEM, letting security teams ingest, curate and manage externally sourced threat indicators in the same platform that holds their security telemetry.

Global – October 31, 2026 -- CrowdStrike has extended Falcon Adversary OverWatch managed threat hunting to AI applications and autonomous agents monitored by Falcon Guardian, and added telemetry-driven hunting for Google Cloud, bringing its coverage of the three major public clouds in line.