CrowdStrike Unveils AI-Powered Cybersecurity Innovations to Combat Emerging Threats

CrowdStrike introduces new tools for blocking malicious AI models, data exfiltration - SiliconANGLE

CrowdStrike introduces new tools for blocking malicious AI models, data exfiltration CrowdStrike Holdings Inc. today debuted new features that can help enterprises protect employees from malicious artificial intelligence models and other threats. The capabilities are rolling out for the company's flagship Falcon cybersecurity platform. The first new feature, AI Model Scanning, promises to detect so-called trojanized models. Those are AI models that operate as expected in most situations, but generate malicious output if they receive certain prompts. A hacker might, for example, configure a programming assistant to generate incorrect advice when developers ask it how to remove a vulnerability from their code. Cybercriminals create trojanized models by injecting malicious records into their training data. It's also possible to generate harmful output by modifying a neural network's weights, configuration settings that determine how it processes prompts. Alongside trojanized models, the new AI Model Scanning can spot backdoors and other threats. It ranks the issues it finds by severity using a technology dubbed ExPRT.AI. According to CrowdStrike, ExPRT.AI uses threat intelligence about hacking campaign to determine how likely it is that a vulnerability will be exploited. AI Model Scanning is rolling out alongside another new feature known as the AI Security Dashboard. It's designed to help administrators spot shadow AI, or situations where workers use potentially insecure AI applications without permission. Additionally, the feature can monitor how a company's internal AI training data is used. CrowdStrike's Falcon platform also has another component designed to spot data misuse. Falcon Data Protection, as the module is called, can detect risks such as attempts to download sensitive records onto an insecure device. The module is receiving several new features as part of today's update. CrowdStrike says that Falcon Data Protection can now detect unauthorized data movements on Macs. Additionally, the new release is considerably better at spotting attempts to obfuscate file exfiltration. Hackers often go about stealing data by breaching a company and then copying records to a server outside the company's corporate network. Attempts to move files outside the corporate network can be detected by cybersecurity tools with relative ease. As a result, hackers sometimes attempt to cover their tracks by packaging stolen data into encrypted ZIP files before moving it. Such files are difficult for cybersecurity tools to scan. According to CrowdStrike, the latest release of Falcon Data Protection scans encrypted ZIP files "as they're created" rather than after the fact. That allows it to scan their contents for stolen data. Additionally, CrowdStrike says that Falcon Data Protection can detect attempts to upload sensitive data to generative AI tools even when the data is modified beforehand. Rounding out the update is a new version of the tool called Falcon Data Protection for Cloud. It's designed to identify unauthorized data movements in public cloud environments. The software can spot unauthorized activity across applications, databases and other off-premises assets. The product updates are joined by a new professional service offering called SaaS Threat Services. Companies that sign up can have CrowdStrike professionals scan their software-as-a-service applications for insecure configuration settings, risky integrations with external applications and related issues.

CrowdStrike Launches New AI Tools To Strengthen Cybersecurity, Expand Threat Detection - CrowdStrike Holdings (NASDAQ:CRWD)

CrowdStrike Holdings, Inc CRWD on Monday showcased Charlotte AI Agentic Response and Charlotte AI Agentic Workflows, marking progress in modern SOC operations. Combined with the previously announced Charlotte AI Agentic Detection Triage, Charlotte AI transcends "ask-and-respond" copilots, delivering autonomous reasoning and action on first- and third-party data. The AI-native CrowdStrike Falcon platform is now cybersecurity's intelligent reasoning AI platform. It draws conclusions without human prompts and takes action with bounded autonomy. Also Read: Broadcom Unveils AI-Powered Cybersecurity Tool To Disrupt Hackers And Boost Resilience Building on Charlotte's AI innovation, CrowdStrike extends the power of agentic AI to cybersecurity services. Separately, CrowdStrike also introduced Falcon Adversary OverWatch Next-Gen SIEM to bring managed threat hunting to third-party data. This innovation extends the visibility of CrowdStrike's elite threat hunters into unmanaged attack surfaces adversaries have long exploited. By leveraging third-party data ingested by Falcon Next-Gen SIEM, CrowdStrike delivers 24/7 expert detection beyond endpoints, identity, and cloud environments to stop breaches across every attack surface. Crowdstrike stock surged 23% year-to-date. Joshua Brown of Ritholtz Wealth Management picked CrowdStrike after it announced an expansion of its partnership with Alphabet Inc's GOOG GOOGL Google Cloud to enable end-to-end security for AI innovation with the company's Falcon Cloud Security platform. Price Action: CrowdStrike stock is down 1.8% at $417.22 at the last check Monday. Read Next: Check Point CEO Highlights Strong Product Demand, AI Platform Growth Amid Mixed Market Reaction CRWDCrowdStrike Holdings Inc$418.18-1.58%Stock Score Locked: Want to See it? Benzinga Rankings give you vital metrics on any stock - anytime. Reveal Full ScoreEdge RankingsMomentum93.35Growth79.94Quality-Value3.20Price TrendShortMediumLongOverviewGOOGAlphabet Inc$161.03-1.72%GOOGLAlphabet Inc$159.31-1.64%Market News and Data brought to you by Benzinga APIs

CrowdStrike Unleashes New Agentic, Outcome-Driven AI Innovations to Power the Next Evolution of the SOC

Charlotte AI unites intelligent automation with human cyber expertise, accelerating detection, investigation and response across the AI-native SOC CrowdStrike unveiled Charlotte AI Agentic Response and Charlotte AI Agentic Workflows, marking a leap forward in modern SOC operations. Combined with the previously announced Charlotte AI Agentic Detection Triage, Charlotte AI transcends "ask-and-respond" copilots, delivering autonomous reasoning and action on first- and third-party data. The AI-native CrowdStrike Falcon® platform is now cybersecurity's intelligent reasoning AI platform, drawing conclusions without human prompts and taking action with bounded autonomy. Building on Charlotte AI innovation, CrowdStrike extends the power of agentic AI to cybersecurity services. Falcon® Complete Next-Gen MDR with Charlotte AI utilizes the triage decisions of CrowdStrike's elite analysts to accelerate investigations - creating a powerful, one-of-a-kind feedback loop that supercharges human and AI performance. The winning combination of CrowdStrike's Charlotte AI agentic model, Next-Gen MDR and CDR, as well as the underlying Falcon platform, delivers the industry's most advanced AI-native SOC. For the first time, security teams can combine AI-powered real-time detection, expert-informed investigation and automated response within one native architecture. From analyst productivity to full-cycle response, CrowdStrike is redefining how AI protects the modern enterprise. "There's a profound difference between adding AI features and fundamentally transforming how cybersecurity works. Charlotte AI goes beyond augmenting humans with suggestions - it actively investigates, reasons and responds autonomously within expert-defined guardrails," said George Kurtz, founder and CEO of CrowdStrike. "Our agentic AI innovation represents a fundamental shift from reactive to proactive security - furthering CrowdStrike's mission of stopping breaches." New Innovations: Charlotte AI Agentic Response: Exponentially increases analyst productivity by automatically asking and answering the investigative questions a seasoned security analyst would pose, accelerating root cause analysis, mapping lateral movement and guiding next steps. This translates to hours of time saved weekly across repetitive alert investigations. Charlotte AI Agentic Workflows: Delivered through Falcon Fusion SOAR, these drag-and-drop, LLM-powered workflows enable analysts to insert and activate AI reasoning directly within automated playbooks. For example, a workflow can automatically determine whether a device should be contained based on company policies, then generate appropriate communications for different audiences - executive summaries, technical updates or customer advisories - with automatic translation for global teams. Falcon Complete with Charlotte AI: Falcon Complete Next-Gen MDR analysts now leverage Charlotte AI to triage alerts and accelerate analysis, combining expert human oversight with intelligent automation to stop breaches more efficiently. Charlotte AI Agentic Detection Triage for Identity: Now extended to Falcon® Identity Protection, allowing analysts to prioritize and act on high-risk identity threats alongside endpoint and cloud alerts, reducing noise and surfacing real attacks faster. Expanded Protection Across the Digital Estate CrowdStrike also announced new Falcon platform capabilities that extend protection across critical infrastructure and enhance organizational resilience: Falcon® for XIoT with ExPRT.AI: Now validated by 12+ leading ICS vendors, this solution delivers real-time, adversary-driven risk insights, enabling organizations to focus on actively exploited vulnerabilities to protect operational technology and IoT systems without disruption. CrowdStrike Pulse Services: New expert-led services help security teams operationalize agentic AI through modular engagements that assess readiness, align workflows and fine-tune policies, accelerating security maturity with targeted guidance.

CrowdStrike Unveils New Innovations to Secure Every Area of Cloud Risk, from AI Models to Runtime Data

New innovations secure AI, data, identities and SaaS applications - expanding CrowdStrike's leadership in delivering unified protection across hybrid and multi-cloud environments CrowdStrike announced new innovations, including AI Model Scanning and detection of Shadow AI, to secure every area of cloud risk with the CrowdStrike Falcon® cybersecurity platform. With capabilities that accelerate secure AI innovation, protect cloud data at runtime, stop SaaS threats, and secure hybrid identities, CrowdStrike expands its platform advantage, delivering unified visibility and protection across hybrid and multi-cloud environments. Cloud intrusions are surging as adversaries exploit valid accounts, and the growth of AI and SaaS makes it harder to protect identities and sensitive data. Stopping cloud breaches requires unified visibility and protection across cloud infrastructure, workloads, applications, identity, data, AI models and SaaS. CrowdStrike covers every layer of cloud risk from the most comprehensive unified platform, spanning advanced cloud detection and response (CDR), AI-powered analytics, runtime protection and world-class threat intelligence to stop cloud breaches. "Cloud security is about more than visibility - it's about full protection and control across multi-cloud environments," said Elia Zaitsev, chief technology officer, CrowdStrike. "The explosion of AI, combined with multi-cloud complexity, has outpaced patchwork tools that can't keep up with today's adversaries, or are limited to single cloud environments. CrowdStrike is breaking that model. These innovations deliver real-time protection, not just telemetry, across every layer of risk: data, workloads, identities, SaaS and AI. It's what only a unified, AI-native platform can do, and is the difference between watching attacks happen and actually stopping them." Securing AI in the Cloud AI innovation is happening in the cloud, and securing that innovation is critical to stopping breaches. CrowdStrike set the standard for securing AI in the cloud with Falcon Cloud Security AI-SPM and AI Red Team Services, protecting the cloud infrastructure, systems and models powering the AI revolution. Building on this leadership, CrowdStrike introduced new Falcon® Cloud Security innovations to detect and mitigate risk in AI models before they become threats, and provide visibility into overall AI security posture: AI Model Scanning: Proactively scans AI models for hidden malware, trojanized models, backdoors, and adversarial manipulations in containerized environments - preventing compromised models from executing at runtime or reaching production. Powered by CrowdStrike threat intelligence and ExPRT.AI, security teams can identify and fix the most business-critical risks before deployment, block untrusted models and eliminate blind spots before threats reach production. AI Security Dashboard: Provides real-time visibility and centralized control over all AI workloads in the cloud. With agentless monitoring, security teams can detect shadow AI, enforce policies and track sensitive training data to reduce exposure and maintain compliant AI adoption. Securing Cloud Identities, Data and SaaS CrowdStrike also introduced new innovations across the Falcon platform to protect cloud data at runtime, stop SaaS threats and secure hybrid identities - driving faster threat detection and reducing risk across cloud environments: Falcon Data Protection for Cloud: Secures cloud data at runtime with real-time monitoring and enforcement powered by eBPF, stopping unauthorized access and data exposure, without slowing systems down. SaaS Threat Services: Provides tailored assessments and real-time threat detection for SaaS applications, helping organizations mitigate risks and secure their cloud-native environments. Falcon Privileged Access: Eliminates standing privileges and manual access requests to sensitive systems and data across hybrid environments through dynamic Just-in-Time access decisions. CrowdStrike Pulse Services: To harden cloud environments, CrowdStrike Pulse Services helps organizations identify and prioritize misconfigurations, manage identities and reduce cloud attack surfaces. Delivered through modular, expert-led engagements, Pulse enables teams to detect and respond to threats faster across hybrid and multi-cloud environments.