65 stories, newest first · one card per story
Hackers left servers open exposing ARTEX framework with Claude Code DeepSeek GLM and Grok models used in breaches affecting 66,000 to 67,000 people and 2,200 companies across seven South Korean banks.
The tool runs on Falcon Guardian and lets admins terminate misbehaving AI agents at their source.
CrowdStrike will add AI testing and agent observability to Falcon via acquisitions of Fiddler AI and Dreadnode, with GA in Q4 fiscal 2027.
CrowdStrike integrates autonomous agents into Falcon for coordinated alert triage and red-teaming.
The purchases expand CrowdStrike's capabilities for monitoring and testing AI agents and models.
The acquisitions add AI observability and automated testing for AI agents to CrowdStrike's platform.
CrowdStrike announced acquisitions of Fiddler AI and Dreadnode in combined deals worth $495 million expected to close in fourth quarter of fiscal 2027.
The guide judges 11 GenAI tools for SOC use based on triage quality, grounding, and integration with existing platforms.
VAPOR PANDA targeted over 200 organizations with ARTEX AI agents in 11 days, confirming post-exploitation at nine sites.
Falcon IQ turns exploitable risks into prioritized actions using AI agents and NVIDIA Nemotron models.
Falcon IQ links CrowdStrike risk findings with Deloitte's advisory and implementation services.
Mandiant leads with guaranteed bench access; Unit 42 offers flexible credits in 2026 IR retainer rankings.
Mandiant tops for APT depth while CrowdStrike excels in telemetry-accelerated response in 2026 DFIR rankings.
The review weighs SLAs, unused-hour conversion, onboarding and post-acquisition ownership rather than responder reputation alone.
Mandiant and CrowdStrike place second and third; Kaspersky is flagged as jurisdiction-gated for Western buyers.
The unpaid comparison maps each provider to the question it answers best and flags Kaspersky for US and allied procurement bans.
Lloyd estimates roughly 1% of users were hit via an unnamed infrastructure vendor; CrowdStrike is investigating.
Services are back in the UK, US and Australia, but SSO, password resets and several products were still degraded as of Tuesday.
Forensics has not determined whether customer data was stolen, and Bullhorn has given no restoration date.
FBI raided Texas laptop farms, arrested two Americans, and charged people tied to DPRK IT-worker schemes.
Prosecutors say North Korean IT workers infiltrated at least 70 U.S. companies using laptop farms and stolen identities.
A Chinese-speaking attacker used ARTEX AI and Claude agents against South Korean banks, exposing customer data.
Anthropic launched Cyber Mission, giving infrastructure operators Claude access, plus a free open-source vulnerability scanner.
CrowdStrike says a Chinese-speaking actor used ARTEX and LLMs to breach South Korean banks and steal data for sale.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views