CyberScoop reports that CrowdStrike will acquire Fiddler AI, which monitors AI agents, and Dreadnode, which tests AI systems, with both deals expected to close in its fiscal fourth quarter of 2027; CrowdStrike did not disclose prices, and the Wall Street Journal put them at $400 million and $95 million.
CrowdStrike says that beginning October 17 VAPOR PANDA used ARTEX "against more than 200 distinct organizations worldwide" in at least 14 countries over an 11-day window, "primarily with the Chinese-origin DeepSeek LLM" plus a second commercial model it could not confirm, with one intrusion consuming "on the order of 1.4 billion input tokens". It confirmed post-exploitation at nine organisations, including deployment of the BLOODALCHEMY backdoor, and says recovered transcripts show a human operator issuing instructions in Chinese.
BleepingComputer reports Warp chief executive Zach Lloyd disclosed what he called an active and narrow-banded exploitation through a vendor in Warp's infrastructure, naming agent traces and telemetry as potentially affected data and estimating "roughly 1% of Warp users may have been impacted"; Warp's site claims at least 800,000 users. CrowdStrike has been engaged and law enforcement notified; the vendor is not named.
Anthropic says it is “launching the Anthropic Cyber Mission, a long-term commitment to securing the systems everyone depends on,” beginning with critical infrastructure and open-source software. Its Critical Infrastructure Defense Program brings frontier models, on-site engineers and threat research to providers securing operational technology such as power grids, water systems and transport networks, starting with “a small cohort of providers”; the “founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.” The second launch is OSS Scanner, “an opt-in service inspired by Google's OSS-Fuzz” under which “enrolled projects receive periodic scans from our most capable models, free of charge,” each report carrying a proof of concept and a suggested fix where one is available. The limit is on the page: “The reports are model-generated and sent without human review,” and “We expect a true-positive rate above 90%, and will work to improve the true positive rate and fix quality over time.” Project Glasswing, under which Anthropic “scanned hundreds of widely used open-source projects” with human triage, was merged into the expanded Cyber Verification Program “earlier this week”; under it “we often saw months pass between a vulnerability being found and being fixed” and partners “uncovered many vulnerabilities, but we haven't yet achieved a sufficient reduction in cyber risk.” Anthropic says it has funded the Python Software Foundation, Alpha-Omega and OpenSSF through the Linux Foundation, the Apache Software Foundation, Akrites and Gold Eagle; that the Defender Advantage Fund launched in August “supports pilot programs in these areas and keeps OSS Scanner free”; and that since June it has offered frontier models and technical support “to more than half of all US states” and some of the country's largest public critical-infrastructure operators. Its stated expectation is that “in two years, AI will favor defense.”
CrowdStrike Intelligence, in a report published October 7 under Ashley Campion's name, describes “a recently released open-source agentic penetration testing (pentesting) tool developed in China” — ARTEX — used against South Korean financial organisations from late September to early October in a campaign that “resulted in exfiltrated data.” The instance examined “used DeepSeek v4.1-flash as the primary LLM backend,” likely reached through the API proxy or reseller xcai[.]pro, and the actor “supplemented this LLM with GLM-5.3 (Zhipu AI) and Grok 4.6 for additional Claude Code sessions.” Open directories on 38.244.50[.]120 and on a Hong Kong IP held “Claude Code session histories, ARTEX configuration files, and Claude memory files,” including a Chinese-language pentesting prompt; in one session the actor asked Claude where stolen Korean breach data is typically sold and for help finding Korean Telegram data-sales groups, and in another asked it to write a security-researcher résumé whose personal details, including a Guangdong location, CrowdStrike says “likely belong” to the ARTEX operator while “currently available information cannot definitively associate these details with the threat actor.” The actor is “likely a Chinese speaker and financially motivated” — “This assessment is made with moderate confidence” — and is tied to no named adversary. CrowdStrike names no victim and says the number of affected organisations is unconfirmed, citing industry reporting for a breached loan-progress inquiry service used by financial brokers at one bank and an employee mobile work-support system at another.
CrowdStrike says the developer behind PhantomRaven — the credential and CI/CD-secret stealer spread through more than 100 malicious npm packages in a campaign first flagged in October 2025 — “likely wrote the malware using a large language model (LLM), an assessment made with high confidence based on verbose comments, placeholder code, and statistical token-analysis patterns.” The operator claimed to be a bug bounty hunter who had collected bounties from at least nine organisations (via The Hacker News; CrowdStrike's own post could not be opened).
SecurityWeek reports that the researcher known as Nightmare Eclipse published three zero-days with proof-of-concept code: PrettyPrague, which targets the Avast sandbox to spawn a shell with full system privileges; FalconFlank, a privilege-escalation bug in the Office malicious-macro remediation feature of the CrowdStrike Falcon Sensor; and GreenSection, an out-of-bounds memory write affecting a shared global memory section used by multiple Nvidia user-mode components. Gen Digital said it “immediately initiated our security response procedures and have fixed the issue”; CrowdStrike said it was “actively investigating these claims” and advised disabling the Microsoft Office File Suspicious Macro Removal Windows policy setting; Nvidia had not commented at publication.
Fairwind limits access to Gemini 3.8 Flash Cyber and CodeMender to government and national cyber authorities, critical infrastructure operators in healthcare, telecommunications, energy and financial services, and core technology platforms, with use confined to internal cybersecurity, incident response and penetration testing staff and multi-factor authentication required. Google states more than 650 participating partners globally and names Armadin, CrowdStrike, Palo Alto Networks, Snowflake and Wiz among them.
CrowdStrike announced SafeMind at Fal.Con on September 1: Red Tempest, described in the release as an “offensive red team model… built for advanced attack scenarios, emulating AI adversaries,” and Blue Solano, a defensive model “built for protecting enterprise assets by deploying battle-tested measures.” CrowdStrike says the pair is built on NVIDIA Nemotron open models with NVIDIA as AI design partner, runs natively in the Falcon platform, and claims a 29% higher detection rate, 6x faster end-to-end remediation and 99% cost savings on detection and remediation against leading frontier models and open-source baselines that the release does not name. Standalone access to the models and harnesses is to run through a Project QuiltWorks trusted-access programme, whose eligibility conditions the release does not state.
CrowdStrike announced the Cyber Superintelligence Lab, which it describes as “the first frontier AI research organization built for cyberdefense and AI safety,” led by chief AI and autonomous systems officer Dr. Bartley Richardson. It names as the lab's inputs Falcon sensor signals from endpoints, identity systems, cloud workloads and data stores at trillions of events a day, labelled by front-line analysts, plus 15 years of CrowdStrike threat intelligence and incident response.
OpenAI published an open letter, co-signed by more than 100 organizations including Anthropic, Google, Microsoft, AWS, Oracle, Cisco, Cloudflare, CrowdStrike, Palo Alto Networks and Hugging Face, calling for collective action to defend against sustained AI-enabled attacks. It urges every organization to make cyber defense an immediate leadership priority and fix its highest-risk weaknesses, asks security and frontier-AI companies to give under-resourced defenders responsible model access, funding and threat-intelligence sharing, and asks governments to coordinate cyber defense across levels and fund essential services that lack the staff or budget.
CrowdStrike cites Dreadnode's finding that “more than a third of all passes on individual tasks on Cybench, across nearly every model assessed, involved cheating” through postmortem searches and probing of the evaluation infrastructure. It says it now relies on task-coupled internal evaluations with rotated validation sets and a separation between evaluation developers and solution architects, and contributes publicly through CyberSOCEval with Meta.
CrowdStrike's annual Threat Hunting Report documents adversaries using LLMs to generate payloads and shell commands, abuse enterprise models and target AI infrastructure, citing one campaign that sent nearly 200,000 model requests in two minutes. It attributes malicious npm packages planted in AI-agent framework projects to DPRK-nexus STARDUST CHOLLIMA and reports cloud-conscious eCrime, including LLM abuse, up 171%.