# Blog The #1 blog in cybersecurity. Industry news, insights from cybersecurity experts, and new product, feature, and company announcements. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## CrowdStrike Accelerates Real-Time Data Classification with On-Device AI DevFeed: [CrowdStrike Accelerates Real-Time Data Classification with On-Device AI]() Original publisher: [Read original article]() Author: Lior Ribak Published: 2026-09-17T01:38:53.400452Z Content type: article Language: en Sources: [Blog]() Topics: [On-device AI](), [sensitive data](), [Language models](), [Endpoint security](), [Hardware](), [intel]() Tags: [data-security](), [endpoint-security](), [intel](), [language-models](), [npu](), [on-device-ai]() ### AI overview CrowdStrike and Intel introduced a Falcon Data Security capability that uses language models running on-device on dedicated AI hardware to classify sensitive data. The article explains that local inference is intended to avoid cloud latency and keep sensitive customer data on the endpoint while meeting real-time protection requirements. ### Source excerpt CrowdStrike worked closely with Intel to introduce a new capability in Falcon Data Security that classifies sensitive data using language models that run on-device using dedicated hardware for AI. Learn more! ## PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting DevFeed: [PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting]() Original publisher: [Read original article]() Author: Maddie Stewart Published: 2026-09-16T13:36:43.658349Z Content type: news Language: en Sources: [Blog]() Topics: [Malware](), [Large Language Model](), [JavaScript](), [npm](), [npm packages](), [Bug Bounty]() Tags: [bug-bounty](), [javascript](), [llm](), [malware](), [npm](), [npm-packages](), [threat-hunting-intel]() ### AI overview CrowdStrike reports that a financially motivated bug bounty hunter developed and distributed PhantomRaven, a JavaScript-based information stealer through npm. The company assesses with high confidence that a large language model was used to write the malware and says the operator likely used it to identify bug bounty opportunities. ### Source excerpt CrowdStrike identified a financially motivated threat actor who works as a bug bounty hunter and who developed and distributed the JavaScript-based information stealer PhantomRaven. ## Agents of Chaos: A New $100K Agentic Security Challenge DevFeed: [Agents of Chaos: A New $100K Agentic Security Challenge]() Original publisher: [Read original article]() Author: Vanessa Villa - John Gamble Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [Security](), [prompt injection](), [AI Agent]() Tags: [agentic](), [agentic-security](), [ai](), [ai-agent](), [ai-agents](), [attacks](), [competition](), [prompt-injection](), [securing-ai](), [security](), [techniques]() ### AI overview CrowdStrike is launching Agents of Chaos, an online game and AI red-teaming competition with a $100,000 prize pool. Players interact with real AI agents in an adversarial world, attempting to manipulate them and exploit gaps between their intended behavior and their actual behavior across three increasingly sophisticated acts. ### Source excerpt Agents of Chaos, CrowdStrike's new AI red teaming competition, tests players' defensive skills against adversarial AI techniques. ## CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks DevFeed: [CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks]() Original publisher: [Read original article]() Author: Anne Aarness - Chris Prall Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [Endpoint Security & XDR](), [supply-chain-security](), [Security](), [Open Source](), [Software](), [Artificial Intelligence](), [Claude](), [codex]() Tags: [agentic](), [ai](), [codex](), [credential-theft](), [developer](), [developers](), [development](), [endpoint-security-xdr](), [malicious-packages](), [open-source](), [open-source-packages](), [persistence](), [security](), [software-supply-chain](), [supply-chain]() ### AI overview The article describes CrowdStrike's Real-Time Supply Chain Attack Protection, embedded in the Falcon sensor, which detects and blocks malicious open-source packages before their code executes on enterprise endpoints. It explains how AI-assisted and agentic applications have expanded software supply chain risk beyond developer workstations to endpoints across the organization. ### Source excerpt Real-Time Supply Chain Attack Protection, embedded into the Falcon sensor, blocks malicious open-source packages at download to protect the endpoint. ## September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs DevFeed: [September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs]() Original publisher: [Read original article]() Author: Falcon Exposure Management Team Published: 2026-09-12T11:17:51.295154Z Content type: news Language: en Sources: [Blog]() Topics: [Vulnerabilities]() Tags: [ai](), [analysis](), [defender](), [exposure-management](), [microsoft](), [patch-tuesday](), [security](), [september-2026](), [updates](), [vulnerabilities]() ### AI overview Microsoft's September 2026 Patch Tuesday addresses 972 vulnerabilities, including two exploited zero-days and 113 critical issues. The article also notes a disclosed proof-of-concept zero-day exploit against Microsoft Defender. ### Source excerpt Microsoft has released security updates for 972 vulnerabilities, including two exploited zero-days and 113 critical, in its September 2026 Patch Tuesday rollout. ## CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms DevFeed: [CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms]() Original publisher: [Read original article]() Author: Brett Shaw Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [workload protection](), [Security & compliance, Cloud security](), [Security](), [telemetry](), [Containers](), [Kubernetes](), [SOC]() Tags: [2026](), [cloud](), [cloud-application-security](), [cloud-security](), [containers](), [growth](), [innovation](), [kubernetes](), [real-time](), [security](), [soc](), [telemetry](), [workload-protection]() ### AI overview CrowdStrike says Frost & Sullivan named it the strongest overall leader in the 2026 Frost Radar for Cloud Workload Protection Platforms. The article highlights Falcon Cloud Security's focus on connecting risk, adversary intelligence, and real-time protection across containers, Kubernetes, identities, cloud control planes, endpoints, and SOC operations. ### Source excerpt Falcon Cloud Security earned the highest scores in both Innovation and Growth by connecting risk, adversary intelligence, and real-time protection to stop attacks. ## Peer Pressure: Inside the Sality Botnet Disruption Operation DevFeed: [Peer Pressure: Inside the Sality Botnet Disruption Operation]() Original publisher: [Read original article]() Author: CrowdStrike Counter Adversary Operations Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [P2P](), [Cybercrime]() Tags: [2026](), [collaboration](), [department-of-justice](), [industry](), [operations](), [partnership](), [support](), [threat-hunting-intel]() ### AI overview CrowdStrike describes a coordinated operation that disrupted the Sality peer-to-peer botnet, which had distributed malicious payloads to more than 33,000 infected machines worldwide. The operation used peer-to-peer sinkholing to isolate infected machines and disable the criminal command channel, with support from international law enforcement and industry partners. ### Source excerpt CrowdStrike collaborated with international law enforcement and industry partners to execute a coordinated disruption of the Sality peer-to-peer botnet. ## CrowdStrike Announces Agentic Identity Provider DevFeed: [CrowdStrike Announces Agentic Identity Provider]() Original publisher: [Read original article]() Author: Ryan Terry Published: 2026-09-12T11:17:51.295154Z Content type: release Language: en Sources: [Blog]() Topics: [AI Agent](), [Next-Gen Identity Security](), [Authorization](), [Security](), [Authentication]() Tags: [2026](), [agentic](), [ai](), [ai-agent](), [api-keys](), [applications](), [authentication](), [authorization](), [cloud-infrastructure](), [code](), [enterprise](), [identity](), [identity-control](), [next-gen-identity-security](), [saas](), [security]() ### AI overview CrowdStrike announces Agentic Identity Provider, a capability in CrowdStrike Falcon Next-Gen Identity Security that gives AI agents trusted identities and continuously controls their access according to real-time security and business context. The announcement also covers expanded privileged access across SaaS applications, endpoints, code repositories, and cloud infrastructure. ### Source excerpt CrowdStrike gives every AI agent a trusted identity and controls their access based on real-time context, and expands modern privileged access. ## CrowdStrike Delivers the Next Evolution of the Agentic SOC DevFeed: [CrowdStrike Delivers the Next Evolution of the Agentic SOC]() Original publisher: [Read original article]() Author: Brandon Benke Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [Agentic SOC](), [SOC](), [Security](), [Artificial Intelligence](), [Automation](), [data](), [real-time](), [Reconnaissance](), [Cloud](), [Network]() Tags: [2026](), [agentic](), [agentic-soc](), [agents](), [ai](), [automation](), [cloud](), [data](), [identity](), [network](), [operations](), [platform](), [real-time](), [saas](), [security](), [soc]() ### AI overview CrowdStrike describes the next evolution of its agentic SOC, where analysts and AI agents work together in a unified system to investigate and respond to threats in real time. The Falcon platform combines data generation, enrichment, investigation, orchestration, and governance, with capabilities for detection-ready third-party data and coordinated specialist agents. ### Source excerpt Expert agents that reason together, learn your environment, and run on data CrowdStrike owns. See how we deliver the agentic SOC. Learn more! ## Teaching AI to Reason Through Detection Triage DevFeed: [Teaching AI to Reason Through Detection Triage]() Original publisher: [Read original article]() Author: Amol Khanna - Manu Nandan - Cristian Viorel Popa - Joan Pujol-Roig - Diana Bolocan - Laura Vasilie - Alexandru Apostu - Chase Helwig - Mihaela Gaman - Mickey Brautbar - Edward Raff - Chase Midler - Sv Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [AI Chat]() Tags: [agentic](), [agentic-soc](), [ai](), [automation](), [chain-of-thought](), [classification](), [cybersecurity](), [language-models](), [llm](), [model](), [nemotron](), [nvidia](), [open](), [reasoning](), [research](), [security](), [soc](), [windows]() ### AI overview CrowdStrike describes research on a reasoning-enabled language-model classifier for security detection triage. The model produces a verdict and an auditable rationale, with the stated goals of improving accuracy, transparency, and safe alert automation. ### Source excerpt New CrowdStrike research shows how step-by-step reasoning can improve detection triage accuracy, transparency, and safe automation. ## Benchmaxxing: When the Benchmark Becomes the Target DevFeed: [Benchmaxxing: When the Benchmark Becomes the Target]() Original publisher: [Read original article]() Author: Nathan Danneman Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [Benchmark](), [Artificial Intelligence](), [Cybersecurity](), [Ground truth / benchmark quality](), [Detection engineering]() Tags: [ai](), [ai-and-cybersecurity](), [benchmark](), [benchmarking](), [benchmarks](), [blog](), [cybersecurity](), [leaderboards](), [securing-ai](), [security](), [validation]() ### AI overview The article explains how public AI and cybersecurity benchmarks can become targets for optimization, a practice it calls "benchmaxxing." It argues that gaming, ceiling effects, data leakage, binary scoring, omitted costs, and aggregate scores can make benchmark results poor proxies for real-world defensive capability. The article proposes task-coupled internal benchmarks intended to evaluate end-to-end cyber agents and support rigorous science rather than visibility-driven score optimization. ### Source excerpt The more attention a benchmark receives, the stronger the incentive to optimize for it. In AI and cybersecurity, this can have significant consequences. ## CrowdStrike Falcon Guardian Defines the Next Generation of AI Security DevFeed: [CrowdStrike Falcon Guardian Defines the Next Generation of AI Security]() Original publisher: [Read original article]() Author: Michael Devins Published: 2026-09-12T11:17:51.295154Z Content type: release Language: en Sources: [Blog]() Topics: [AI Bots]() Tags: [agentic](), [agents](), [ai](), [ai-agent](), [ai-agents](), [ai-gateway](), [ai-security](), [architecture](), [autonomous](), [platform](), [securing-ai](), [security](), [telemetry](), [threat-detection]() ### AI overview CrowdStrike announces Falcon Guardian, an AI detection and response solution for discovering, monitoring, investigating, and securing AI agents at runtime. It adds an AI gateway and connects agent activity with endpoint telemetry to support threat response. ### Source excerpt A new flagship AI detection and response solution delivers runtime protection for AI agents, introduces a new AI gateway, and extends expert-led defense.