News related to crowdstrike

AI misuse sharpens EDR evasion threat

A threat actor has used artificial intelligence coding tools to build and refine malware intended to bypass endpoint detection and response systems, highlighting how generative AI is being folded into practical cyberattack development rather than remaining a theoretical risk. The activity was presented as a red team project, but the discovered framework pointed to stealthy post-exploitation operations, including ransomware deployment and data theft. The case shows how […]

June 03

AI bug hunt strains patch pipelines

Anthropic’s Claude Mythos Preview has identified more than 10,000 high- or critical-severity software vulnerabilities through Project Glasswing, intensifying debate over whether frontier AI is becoming a defensive breakthrough or a new accelerant for cyber risk. The findings, disclosed after the initiative’s first month of operation, mark a sharp escalation in AI-assisted vulnerability discovery across software used in operating systems, browsers, cloud platforms, open-source projects and financial infrastructure. […]

May 24

OpenAI pushes AI deeper into cyber defence

OpenAI has launched Daybreak, a cybersecurity initiative designed to use frontier AI models and Codex Security to find software flaws, generate fixes and verify remediation before attackers can exploit weaknesses in code. Daybreak marks a sharper push by the ChatGPT maker into defensive cybersecurity, where AI systems are being positioned not merely as coding assistants but as tools for secure-by-design software development. The service is built around […]

May 13

Claude exploit test rattles browser security

Anthropic’s Claude Opus has been thrust into a fresh security debate after researcher Mohan Pedhapati said he used the model to help build a working V8 exploit chain that achieved code execution against an outdated Chromium build bundled with Discord. Pedhapati, CTO of Hacktron and known online as s1r1us, said the exercise ran over about a week, consumed 2.3 billion tokens, cost $2,283 in API fees and […]

April 19

OpenClaw sharpens agentic AI security warning

OpenClaw’s rapid rise from an open-source personal assistant to a flashpoint in boardroom and regulatory discussions has turned the software into one of the clearest illustrations yet of the cybersecurity dangers surrounding agentic AI. Security specialists, regulators and large technology firms are converging on the same point: the problem is no longer limited to what an AI model can say, but what an AI agent can do […]

April 17

MSBuild abuse deepens stealth on Windows

MSBuild, a legitimate Microsoft build tool embedded in many Windows and developer environments, is drawing renewed scrutiny after fresh threat research showed how attackers are using it to run malicious code in memory, evade signature-based defences and blend into normal system activity. Security researchers and defenders say the technique is not new, but its continued effectiveness underlines how cyber intrusions are shifting away from obvious malware files […]

April 14

Advertisements
ADVERTISEMENT
 

Google flags BPO helpdesk extortion threat

Google has warned that a financially motivated cyber group tracked as UNC6783 is targeting business process outsourcers and corporate helpdesks in a campaign aimed at stealing sensitive data from large companies and then using that access for extortion. The group, which Google says may be tied to the “Raccoon” persona, has targeted several dozen high-value organisations across multiple sectors, shifting attention to a weak point that many […]

April 10

Anthropic’s Glasswing tests AI bug hunters

Anthropic has launched Project Glasswing, a controlled cybersecurity programme that gives a select group of large technology, finance and security organisations access to its unreleased Claude Mythos Preview model to identify and help fix serious software vulnerabilities in widely used systems. The company says the model has already uncovered thousands of significant flaws across operating systems, browsers and other foundational software, but has stopped short of making […]

April 09

Windows admin tools turned into ransomware enablers

Hackers are weaponising trusted Windows administration tools and signed but vulnerable drivers to switch off antivirus and endpoint detection systems before launching ransomware, a tactic that is making intrusions quieter, faster and more difficult for defenders to stop. Security researchers and government-backed advisories say attackers are increasingly avoiding noisy custom malware in the opening stages of an attack, instead leaning on built-in utilities, service controls, scripts and […]

March 31

Mythos leak rattles cyber and crypto

Anthropic’s accidental exposure of internal material about an unreleased AI system dubbed Claude Mythos has jolted investors, sending cybersecurity shares sharply lower and adding to pressure across risk assets, while reviving a deeper debate over whether frontier AI is moving faster than the safeguards meant to contain it. The leaked material, first reported by Fortune on March 26 and 27, described Mythos as Anthropic’s most powerful model […]

March 28

Beyon Cyber and Haven to Unveil Orryx AI SOCs Globally

Bahrain’s Beyon Cyber and global cybersecurity firm Haven Cyber Technologies have entered a strategic Memorandum of Understanding to deploy advanced AI-powered Security Operations Centres across the UK and internationally, integrating Beyon’s Orryx AI platform into Haven’s managed services portfolio. Under the agreement, Haven will adopt the Orryx AI platform through its UK subsidiary, ITC Secure, and embed agentic AI workflows into its threat detection and response operations. […]

October 18

Alphabet Unit Pulls Out of CrowdStrike Investment

Alphabet’s investment arm has fully divested its stake in CrowdStrike, a cybersecurity firm, after initially reducing its holdings in the first quarter. This decision signals a notable shift in the company’s strategy, which had previously seen an active involvement in the growth of CrowdStrike. The tech giant’s divestment raises questions about broader trends in the tech and cybersecurity sectors. The exit from CrowdStrike follows Alphabet’s trimming of […]

August 05

Asian News by Media-Outreach

Zscaler’s Acquisition of Red Canary Signals a New Era in AI-Driven Cybersecurity

Zscaler has announced its intention to acquire Red Canary, a leading Managed Detection and Response provider, in a strategic move aimed at enhancing its capabilities in AI-powered cybersecurity. This acquisition is poised to bolster Zscaler’s position in the cybersecurity landscape, particularly in the realm of AI-driven threat detection and response. The integration of Red Canary’s MDR expertise with Zscaler’s Zero Trust Exchange platform is expected to provide […]

May 28

Allianz Risk Barometer 2025: Business interruption top business risk in Asia

Companies identify Business interruption as their top business concern for the year ahead (37% of overall responses) Cyber ranks #2 (31%), with data breaches identified as the cyber exposure companies fear most Natural catastrophes retain #3 rank (27%) in Asia, which is heating up faster than the global average SINGAPORE – Media OutReach Newswire – 15 January 2025 – Business interruption is the biggest worry for Asian […]

January 15

World

Delta Sues CrowdStrike Over Tech Failure That Halted Summer Flights

Delta Air Lines has initiated legal proceedings against cybersecurity firm CrowdStrike, attributing a widespread system outage this summer to the company’s alleged oversight. The malfunction, reportedly triggered by an improperly tested software update, disrupted Delta’s operations during peak travel season, resulting in approximately 7,000 flight cancellations and extensive delays. Delta claims the incident led to over $500 million in revenue losses and additional operational costs, according to […]

October 28

Asian News by Media-Outreach

Cybersecurity Threats Intensify as Generative AI Gains Ground

Arabian Post Staff The emergence of generative AI is set to revolutionize the landscape of cybersecurity, presenting both opportunities and challenges. As this technology becomes increasingly accessible, cybersecurity experts are sounding alarms about the heightened risks it poses to digital security. In 2024, generative AI is anticipated to play a crucial role in various sectors, from business innovation to complex cyber threats. The technology’s ability to create […]

August 10

Trend Micro Expands Partnership Focus to Secure Enterprise AI Use

AI Platform Strategy Extends to New Partnerships and Industry Cooperation HONG KONG SAR – Media OutReach Newswire – 9 August 2024 – Trend Micro Incorporated (TYO: 4704; TSE: 4704) continues to pioneer advancements in its cybersecurity platform to secure enterprise AI use. Aligned with this innovation focus, the company today announced its partnership with GMI Cloud, a leading venture-backed AI-native GPU cloud provider specializing in the development […]

August 09

CrowdStrike Faces Shareholder Lawsuit Over Major Software Outage

Arabian Post Staff CrowdStrike Holdings Inc. is facing legal action from shareholders who allege that the cybersecurity firm misled investors about its software testing practices. The lawsuit, filed on July 31, 2024, accuses the company of fraudulently concealing deficiencies in its software, which led to a significant global outage on July 19, 2024. The outage, which affected numerous organizations worldwide, has been attributed to flaws in CrowdStrike’s […]

August 01

Top Alternatives to CrowdStrike for Endpoint Security

Arabian Post Staff Several advanced endpoint security solutions are gaining traction as viable alternatives to CrowdStrike, offering robust protection against evolving cyber threats. These platforms provide comprehensive threat detection and response capabilities, catering to diverse organizational needs. SentinelOne‘s Singularity Platform stands out with its autonomous response technology. It uses artificial intelligence to detect and mitigate threats without human intervention, ensuring continuous protection. SentinelOne’s solution is designed for […]

July 24

Latest Updates

Fake CrowdStrike Resources Exploited to Spread Malware

Businesses are facing a new cybersecurity threat as hackers exploit counterfeit CrowdStrike recovery tools to infiltrate networks and deploy malware. The fraudulent files are designed to mimic legitimate CrowdStrike resources, aiming to deceive organizations into executing malicious software. The attack mechanism involves hackers creating counterfeit recovery tools that appear to be from CrowdStrike, a prominent cybersecurity firm known for its endpoint protection solutions. These fake tools are […]

July 24