logo

News related to
crowdstrike

CrowdStrike is investigating a publicly released proof-of-concept exploit that a security researcher says can elevate local privileges to SYSTEM level on Windows machines running its Falcon endpoint sensor. The exploit, dubbed FalconFlank, was published on GitHub on September 3 by a researcher using the names Nightmare Eclipse, Chaotic Eclipse and MSNightmare. The researcher described it as a zero-day privilege-escalation flaw that abuses Falcon Sensor’s Microsoft Office malicious-macro […]

More than 100 technology, financial and security organisations have warned that the world has only months to strengthen digital defences before increasingly capable artificial intelligence systems make sophisticated cyberattacks cheaper, faster and far easier to scale. OpenAI, Anthropic, Google, Microsoft, Amazon Web Services, Oracle and IBM are among the companies backing a global call for governments and businesses to treat cyber defence as an immediate priority. The […]

Nvidia has assembled nearly 40 technology companies to develop open tools for artificial intelligence security, but the absence of OpenAI, Google, Anthropic and Amazon has highlighted widening divisions over how the industry should protect increasingly autonomous systems. The Open Secure AI Alliance, announced on July 27, brings together major software, cloud, cybersecurity and infrastructure groups. Its inaugural partners include Microsoft, IBM, Adobe, Cisco, CrowdStrike, Cloudflare, Dell Technologies, […]

Google has begun introducing a unified naming system for cyber threat actors, replacing overlapping labels used by its security teams with two-word cryptonyms designed to give defenders clearer context about attackers and their likely objectives. The Google Threat Intelligence Group, known as GTIG, said the taxonomy would standardise threat tracking across its platforms and public reporting. The change follows the integration of Mandiant and Google’s Threat Analysis […]

A newly identified ransomware operation is using a Microsoft-signed malicious driver to disable cybersecurity protections before encrypting files, exposing a dangerous weakness in the trust mechanisms underpinning Windows systems. The malware, named GodDamn, deploys the PoisonX kernel driver to terminate antivirus and endpoint detection and response processes. Kernel-level access gives the driver extensive control over an infected computer, allowing attackers to neutralise defensive software that might otherwise […]

A threat actor has used artificial intelligence coding tools to build and refine malware intended to bypass endpoint detection and response systems, highlighting how generative AI is being folded into practical cyberattack development rather than remaining a theoretical risk. The activity was presented as a red team project, but the discovered framework pointed to stealthy post-exploitation operations, including ransomware deployment and data theft. The case shows how […]

Anthropic’s Claude Mythos Preview has identified more than 10,000 high- or critical-severity software vulnerabilities through Project Glasswing, intensifying debate over whether frontier AI is becoming a defensive breakthrough or a new accelerant for cyber risk. The findings, disclosed after the initiative’s first month of operation, mark a sharp escalation in AI-assisted vulnerability discovery across software used in operating systems, browsers, cloud platforms, open-source projects and financial infrastructure. […]

Advertisements

OpenAI has launched Daybreak, a cybersecurity initiative designed to use frontier AI models and Codex Security to find software flaws, generate fixes and verify remediation before attackers can exploit weaknesses in code. Daybreak marks a sharper push by the ChatGPT maker into defensive cybersecurity, where AI systems are being positioned not merely as coding assistants but as tools for secure-by-design software development. The service is built around […]

Anthropic’s Claude Opus has been thrust into a fresh security debate after researcher Mohan Pedhapati said he used the model to help build a working V8 exploit chain that achieved code execution against an outdated Chromium build bundled with Discord. Pedhapati, CTO of Hacktron and known online as s1r1us, said the exercise ran over about a week, consumed 2.3 billion tokens, cost $2,283 in API fees and […]

OpenClaw’s rapid rise from an open-source personal assistant to a flashpoint in boardroom and regulatory discussions has turned the software into one of the clearest illustrations yet of the cybersecurity dangers surrounding agentic AI. Security specialists, regulators and large technology firms are converging on the same point: the problem is no longer limited to what an AI model can say, but what an AI agent can do […]

MSBuild, a legitimate Microsoft build tool embedded in many Windows and developer environments, is drawing renewed scrutiny after fresh threat research showed how attackers are using it to run malicious code in memory, evade signature-based defences and blend into normal system activity. Security researchers and defenders say the technique is not new, but its continued effectiveness underlines how cyber intrusions are shifting away from obvious malware files […]

Google has warned that a financially motivated cyber group tracked as UNC6783 is targeting business process outsourcers and corporate helpdesks in a campaign aimed at stealing sensitive data from large companies and then using that access for extortion. The group, which Google says may be tied to the “Raccoon” persona, has targeted several dozen high-value organisations across multiple sectors, shifting attention to a weak point that many […]

Anthropic has launched Project Glasswing, a controlled cybersecurity programme that gives a select group of large technology, finance and security organisations access to its unreleased Claude Mythos Preview model to identify and help fix serious software vulnerabilities in widely used systems. The company says the model has already uncovered thousands of significant flaws across operating systems, browsers and other foundational software, but has stopped short of making […]

Hackers are weaponising trusted Windows administration tools and signed but vulnerable drivers to switch off antivirus and endpoint detection systems before launching ransomware, a tactic that is making intrusions quieter, faster and more difficult for defenders to stop. Security researchers and government-backed advisories say attackers are increasingly avoiding noisy custom malware in the opening stages of an attack, instead leaning on built-in utilities, service controls, scripts and […]

Anthropic’s accidental exposure of internal material about an unreleased AI system dubbed Claude Mythos has jolted investors, sending cybersecurity shares sharply lower and adding to pressure across risk assets, while reviving a deeper debate over whether frontier AI is moving faster than the safeguards meant to contain it. The leaked material, first reported by Fortune on March 26 and 27, described Mythos as Anthropic’s most powerful model […]

Bahrain’s Beyon Cyber and global cybersecurity firm Haven Cyber Technologies have entered a strategic Memorandum of Understanding to deploy advanced AI-powered Security Operations Centres across the UK and internationally, integrating Beyon’s Orryx AI platform into Haven’s managed services portfolio. Under the agreement, Haven will adopt the Orryx AI platform through its UK subsidiary, ITC Secure, and embed agentic AI workflows into its threat detection and response operations. […]

Alphabet’s investment arm has fully divested its stake in CrowdStrike, a cybersecurity firm, after initially reducing its holdings in the first quarter. This decision signals a notable shift in the company’s strategy, which had previously seen an active involvement in the growth of CrowdStrike. The tech giant’s divestment raises questions about broader trends in the tech and cybersecurity sectors. The exit from CrowdStrike follows Alphabet’s trimming of […]

Zscaler has announced its intention to acquire Red Canary, a leading Managed Detection and Response provider, in a strategic move aimed at enhancing its capabilities in AI-powered cybersecurity. This acquisition is poised to bolster Zscaler’s position in the cybersecurity landscape, particularly in the realm of AI-driven threat detection and response. The integration of Red Canary’s MDR expertise with Zscaler’s Zero Trust Exchange platform is expected to provide […]

Companies identify Business interruption as their top business concern for the year ahead (37% of overall responses) Cyber ranks #2 (31%), with data breaches identified as the cyber exposure companies fear most Natural catastrophes retain #3 rank (27%) in Asia, which is heating up faster than the global average SINGAPORE – Media OutReach Newswire – 15 January 2025 – Business interruption is the biggest worry for Asian […]

Delta Air Lines has initiated legal proceedings against cybersecurity firm CrowdStrike, attributing a widespread system outage this summer to the company’s alleged oversight. The malfunction, reportedly triggered by an improperly tested software update, disrupted Delta’s operations during peak travel season, resulting in approximately 7,000 flight cancellations and extensive delays. Delta claims the incident led to over $500 million in revenue losses and additional operational costs, according to […]

Arabian Post Staff The emergence of generative AI is set to revolutionize the landscape of cybersecurity, presenting both opportunities and challenges. As this technology becomes increasingly accessible, cybersecurity experts are sounding alarms about the heightened risks it poses to digital security. In 2024, generative AI is anticipated to play a crucial role in various sectors, from business innovation to complex cyber threats. The technology’s ability to create […]

AI Platform Strategy Extends to New Partnerships and Industry Cooperation HONG KONG SAR – Media OutReach Newswire – 9 August 2024 – Trend Micro Incorporated (TYO: 4704; TSE: 4704) continues to pioneer advancements in its cybersecurity platform to secure enterprise AI use. Aligned with this innovation focus, the company today announced its partnership with GMI Cloud, a leading venture-backed AI-native GPU cloud provider specializing in the development […]

Arabian Post Staff CrowdStrike Holdings Inc. is facing legal action from shareholders who allege that the cybersecurity firm misled investors about its software testing practices. The lawsuit, filed on July 31, 2024, accuses the company of fraudulently concealing deficiencies in its software, which led to a significant global outage on July 19, 2024. The outage, which affected numerous organizations worldwide, has been attributed to flaws in CrowdStrike’s […]

Arabian Post Staff Several advanced endpoint security solutions are gaining traction as viable alternatives to CrowdStrike, offering robust protection against evolving cyber threats. These platforms provide comprehensive threat detection and response capabilities, catering to diverse organizational needs. SentinelOne‘s Singularity Platform stands out with its autonomous response technology. It uses artificial intelligence to detect and mitigate threats without human intervention, ensuring continuous protection. SentinelOne’s solution is designed for […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
PoisonedRefresh embeds memory-only shells in F5 BIG-IP // Melco wins five accolades at the 10th Anniversary Trip.Gourmet Restaurant Rankings and Fine Dining Awards // IDScan faces widening class actions over ID exposure // Burjeel adds Sharjah’s first PET/CT cancer service // flynas takes 10% holding in Swissport Saudi Arabia // Abu Dhabi Sphere construction moves into active delivery // New Research Reveals How Asia’s Wealthiest Families Give // Satellite tracking sharpens Nepal glacier flood warnings // PIF establishes Gulf Coast tourism developer in Khafji // Ping An Digital Bank Celebrates 6th Anniversary with Exclusive 3 Hong Kong and 3SUPREME Collaboration // The Modi Question: Truthfulness was never put on trial // UAE fast-tracks alternative energy and trade corridors // CUHK holds Flag-raising and Inauguration Ceremonies to commence the 2026/27 academic year // Iran outlines Gulf restricted zone, Oman corridor plan // DMCC opens record silver bar to tokenised investors // Salam forges 29 partnerships at LEAP 2026 // OPEC+ producers hold October quotas steady // Bahrain formalises Expo 2030 Riyadh participation // Alibaba Cloud establishes Brazil region with two centres // TP named Frost & Sullivan’s 2026 Asia-Pacific Company of the Year in Customer Experience Management Services //