--- id: 10292 canonical_url: "https://phying.com/item/10292" title: "CrowdStrike Uncovers New Agentic AI Campaigns" type: "blog" cve: null cvss: null severity: "unknown" vendor: null product: null affected_versions: null source_domain: "crowdstrike.com" source_url: "https://www.crowdstrike.com/en-us/blog/crowdstrike-uncovers-new-agentic-ai-campaigns/" published_at: "2026-10-21T00:00:00Z" snapshot_at: "2026-10-27T14:59:54Z" archived_by: "Phying News (https://phying.com/item/10292)" lang: "en" --- # CrowdStrike Uncovers New Agentic AI Campaigns *Published on: 2026-10-21 · Source: [crowdstrike.com](https://www.crowdstrike.com/en-us/blog/crowdstrike-uncovers-new-agentic-ai-campaigns/)* * * [ ](https://www.twitter.com/CrowdStrike) * * [ ](https://www.linkedin.com/company/crowdstrike) * [ ](https://www.youtube.com/user/CrowdStrike) * [ ](mailto:info@crowdstrike.com) [ ![Crowdstrike](https://assets.crowdstrike.com/is/content/crowdstrikeinc/RedLogoCS) ](https://www.crowdstrike.com/en-us/) [Blog](https://www.crowdstrike.com/en-us/blog/ "Blog") * [Featured](https://www.crowdstrike.com/en-us/blog/featured-articles/) * [ ![Why Organizations Secure AI Agents with Falcon Guardian](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-AIDR-Protection?wid=2048&hei=1349&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Why Organizations Secure AI Agents with Falcon Guardian Oct 23, 2026 ](https://www.crowdstrike.com/en-us/blog/why-organizations-secure-ai-agents-with-falcon-guardian/) * [ ![Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/CS_Blog-Update_02-1?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation Oct 23, 2026 ](https://www.crowdstrike.com/en-us/blog/obstacles-to-weaponizing-php2shell-likely-constrain-exploitation/) * [ ![CrowdStrike Uncovers New Agentic AI Campaigns](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-AgenticAI-Report?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Uncovers New Agentic AI Campaigns Oct 21, 2026 ](https://www.crowdstrike.com/en-us/blog/crowdstrike-uncovers-new-agentic-ai-campaigns/) * [ ![CrowdStrike Protects Customers from Threats Delivered via PHP2Shell](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-RR-SharePoint?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Protects Customers from Threats Delivered via PHP2Shell Oct 21, 2026 ](https://www.crowdstrike.com/en-us/blog/crowdstrike-protects-customers-from-php-rce-zero-days/) * [Recent](https://www.crowdstrike.com/en-us/blog/recent-articles/) * [ ![Why Organizations Secure AI Agents with Falcon Guardian](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-AIDR-Protection?wid=2048&hei=1349&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Why Organizations Secure AI Agents with Falcon Guardian Oct 23, 2026 ](https://www.crowdstrike.com/en-us/blog/why-organizations-secure-ai-agents-with-falcon-guardian/) * [ ![Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/CS_Blog-Update_02-1?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation Oct 23, 2026 ](https://www.crowdstrike.com/en-us/blog/obstacles-to-weaponizing-php2shell-likely-constrain-exploitation/) * [ ![CrowdStrike Uncovers New Agentic AI Campaigns](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-AgenticAI-Report?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Uncovers New Agentic AI Campaigns Oct 21, 2026 ](https://www.crowdstrike.com/en-us/blog/crowdstrike-uncovers-new-agentic-ai-campaigns/) * [ ![CrowdStrike Protects Customers from Threats Delivered via PHP2Shell](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-RR-SharePoint?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Protects Customers from Threats Delivered via PHP2Shell Oct 21, 2026 ](https://www.crowdstrike.com/en-us/blog/crowdstrike-protects-customers-from-php-rce-zero-days/) * [Video](https://www.crowdstrike.com/en-us/blog/videos/) * [ ![Video Highlights the 4 Key Steps to Successful Incident Response](https://assets.crowdstrike.com/is/image/crowdstrikeinc/IR-Video-Blog-1?wid=530&hei=349&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Video Highlights the 4 Key Steps to Successful Incident Response Dec 02, 2019 ](https://www.crowdstrike.com/en-us/blog/video-highlights-the-4-key-steps-to-successful-incident-response/) * [ ![Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less \[VIDEO\]](https://assets.crowdstrike.com/is/image/crowdstrikeinc/video-ATTCK2-1?wid=530&hei=349&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO] Feb 21, 2019 ](https://www.crowdstrike.com/en-us/blog/helping-non-security-stakeholders-understand-attck-in-10-minutes-or-less/) * [ ![Analyzing Targeted Intrusions Through the ATT&CK Framework Lens \[VIDEO\]](https://assets.crowdstrike.com/is/image/crowdstrikeinc/video-ATTCK2-1?wid=530&hei=349&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO] Jan 22, 2019 ](https://www.crowdstrike.com/en-us/blog/analyzing-targeted-intrusions-through-the-attck-framework-lens-video/) * [ ![Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust \[VIDEO\]](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Edward-Gonam-Qatar-Blog2-1?wid=530&hei=349&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO] Aug 20, 2018 ](https://www.crowdstrike.com/en-us/blog/qatars-commercial-bank-chooses-crowdstrike-falcon-a-partnership-based-on-trust/) * [Category](https://www.crowdstrike.com/en-us/blog/categories-overview/) * [ Agentic SOC ](https://www.crowdstrike.com/en-us/blog/category.ai-machine-learning/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/Agentic-SOC-Blog-icon.svg) Agentic SOC [ ![CrowdStrike Delivers the Next Evolution of the Agentic SOC](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-FalCon-AgenticSOC?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Delivers the Next Evolution of the Agentic SOC ](https://www.crowdstrike.com/en-us/blog/crowdstrike-delivers-next-evolution-of-agentic-soc/) 09/02/26 [ ![Teaching AI to Reason Through Detection Triage](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-AI-Red-Team?wid=1061&hei=699&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Teaching AI to Reason Through Detection Triage ](https://www.crowdstrike.com/en-us/blog/teaching-ai-to-reason-through-detection-triage/) 08/17/26 [ ![How AI-leading Security Teams Are Building the Agentic SOC](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-SOC-AI?wid=1536&hei=1024&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) How AI-leading Security Teams Are Building the Agentic SOC ](https://www.crowdstrike.com/en-us/blog/how-ai-leading-security-teams-are-building-the-agentic-soc/) 07/06/26 [ ![New Claude Integration Brings Audit Data into the Falcon Platform](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Integration?wid=1544&hei=1018&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) New Claude Integration Brings Audit Data into the Falcon Platform ](https://www.crowdstrike.com/en-us/blog/new-claude-integration-brings-audit-data-into-the-falcon-platform/) 05/21/26 * [ Cloud & Application Security ](https://www.crowdstrike.com/en-us/blog/category.cloud-security/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Cloud-Application-Security.svg) Cloud & Application Security [ ![New in Falcon Cloud Security: Third-Party App Insights and AI-Enhanced Remediation](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-ForresterTEI-Cloud?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) New in Falcon Cloud Security: Third-Party App Insights and AI-Enhanced Remediation ](https://www.crowdstrike.com/en-us/blog/falcon-cloud-security-third-party-app-insights-ai-enhanced-remedation/) 10/05/26 [ ![CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Frost-CWPP-2026?wid=1060&hei=689&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms ](https://www.crowdstrike.com/en-us/blog/crowdstrike-named-strongest-overall-leader-2026-frost-radar-cwpp/) 08/20/26 [ ![Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-FCS-July26?wid=2048&hei=1365&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud ](https://www.crowdstrike.com/en-us/blog/new-in-falcon-cloud-security-helping-security-teams-move-faster/) 07/29/26 [ ![Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Cloud-Puzzle-Tech?wid=2048&hei=1349&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud ](https://www.crowdstrike.com/en-us/blog/new-in-falcon-cloud-security-expanding-multi-cloud-coverage/) 06/29/26 * [ Threat Hunting & Intel ](https://www.crowdstrike.com/en-us/blog/category.counter-adversary-operations/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Counter-Adversary-Ops.svg) Threat Hunting & Intel [ ![Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/CS_Blog-Update_02-1?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation ](https://www.crowdstrike.com/en-us/blog/obstacles-to-weaponizing-php2shell-likely-constrain-exploitation/) 10/23/26 [ ![CrowdStrike Uncovers New Agentic AI Campaigns](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-AgenticAI-Report?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Uncovers New Agentic AI Campaigns ](https://www.crowdstrike.com/en-us/blog/crowdstrike-uncovers-new-agentic-ai-campaigns/) 10/21/26 [ ![U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-LABYRINTH-CHOLLIMA?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance ](https://www.crowdstrike.com/en-us/blog/fbi-disrupts-famous-chollima-operation-with-crowdstrike-assistance/) 10/13/26 [ ![Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance](https://assets.crowdstrike.com/is/image/crowdstrikeinc/0523_01_APAC-Cross-Boarder-Transfer-Systems_03-1024x674?wid=1024&hei=674&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance ](https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/) 10/07/26 * [ Endpoint Security & XDR ](https://www.crowdstrike.com/en-us/blog/category.endpoint-protection/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/Endpoint-Security-And-XDR.svg) Endpoint Security & XDR [ ![CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment](https://assets.crowdstrike.com/is/image/crowdstrikeinc/IDC%20Endpoint%20MarketScape%202026%20Report_Blog_1060x689?wid=1060&hei=689&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment ](https://www.crowdstrike.com/en-us/blog/crowdstrike-named-leader-2026-idc-marketscape-worldwide-modern-endpoint-security-for-enterprises/) 10/07/26 [ ![CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-FalCon-SupplyChain?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks ](https://www.crowdstrike.com/en-us/blog/crowdstrike-extends-endpoint-security-to-stop-supply-chain-attacks/) 09/02/26 [ ![Browser Security: Zero-Days Are Only Part of the Problem ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Zero-Days?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Browser Security: Zero-Days Are Only Part of the Problem ](https://www.crowdstrike.com/en-us/blog/browser-security-zero-days-are-only-part-of-the-problem/) 06/30/26 [ ![New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-ClickOnce-2?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever ](https://www.crowdstrike.com/en-us/blog/new-abuse-of-the-clickonce-technology-part-two/) 06/18/26 * [ Engineering & Tech ](https://www.crowdstrike.com/en-us/blog/category.engineering-and-technology/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Engineering-and-Tech.svg) Engineering & Tech [ ![EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-EMBER2024?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware ](https://www.crowdstrike.com/en-us/blog/ember-2024-advancing-cybersecurity-ml-training-on-evasive-malware/) 09/03/25 [ ![Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-COOKIESPIDER?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS ](https://www.crowdstrike.com/en-us/blog/falcon-prevents-cookie-spider-shamos-delivery-macos/) 08/20/25 [ ![CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-DataSplitting-4?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting ](https://www.crowdstrike.com/en-us/blog/machine-learning-evaluation-using-data-splitting/) 08/11/25 [ ![CrowdStrike Researchers Develop Custom XGBoost Objective to Improve ML Model Release Stability](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-XGBoost?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Researchers Develop Custom XGBoost Objective to Improve ML Model Release Stability ](https://www.crowdstrike.com/en-us/blog/crowdstrike-researchers-develop-custom-xgboost-objective/) 03/20/25 * [ Executive Viewpoint ](https://www.crowdstrike.com/en-us/blog/category.executive-viewpoint/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Exec-Viewpoint.svg) Executive Viewpoint [ ![Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-DeepSeek?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense ](https://www.crowdstrike.com/en-us/blog/harnessing-frontier-ai-for-stronger-defense/) 07/20/26 [ ![Frontier AI Is Collapsing the Exploit Window. Here’s How Defenders Must Respond.](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-DeepSeek?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Frontier AI Is Collapsing the Exploit Window. Here’s How Defenders Must Respond. ](https://www.crowdstrike.com/en-us/blog/frontier-ai-collapses-exploit-window-how-defenders-must-respond/) 04/20/26 [ ![Frontier AI for Defenders: CrowdStrike and OpenAI TAC](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Shield-AI?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Frontier AI for Defenders: CrowdStrike and OpenAI TAC ](https://www.crowdstrike.com/en-us/blog/frontier-ai-for-defenders-crowdstrike-and-openai-tac/) 04/16/26 [ ![Anthropic Claude Mythos Preview: The More Capable AI Becomes, the More Security It Needs](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Architecture-of-Agentic-Defense?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Anthropic Claude Mythos Preview: The More Capable AI Becomes, the More Security It Needs ](https://www.crowdstrike.com/en-us/blog/crowdstrike-founding-member-anthropic-mythos-frontier-model-to-secure-ai/) 04/06/26 * [ From The Front Lines ](https://www.crowdstrike.com/en-us/blog/category.from-the-front-lines/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Front-Lines.svg) From The Front Lines [ ![CrowdStrike Protects Customers from Threats Delivered via PHP2Shell](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-RR-SharePoint?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Protects Customers from Threats Delivered via PHP2Shell ](https://www.crowdstrike.com/en-us/blog/crowdstrike-protects-customers-from-php-rce-zero-days/) 10/21/26 [ ![CrowdStrike Achieves NCSC CIR Enhanced Level Assurance](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-CIR?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Achieves NCSC CIR Enhanced Level Assurance ](https://www.crowdstrike.com/en-us/blog/crowdstrike-achieves-uk-ncsc-cir-enhanced-level-assurance/) 10/20/26 [ ![CrowdStrike Technical Risk Assessments Reveal Common Exposure Patterns ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Personalized-Threat-Intel%20\(1\)?wid=2048&hei=1350&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Technical Risk Assessments Reveal Common Exposure Patterns ](https://www.crowdstrike.com/en-us/blog/crowdstrike-technical-risk-assessments-reveal-common-exposure-patterns/) 05/04/26 [ ![Introducing the CrowdStrike Shadow AI Visibility Service](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-ShadowAI?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Introducing the CrowdStrike Shadow AI Visibility Service ](https://www.crowdstrike.com/en-us/blog/crowdstrike-shadow-AI-visibility-service/) 04/21/26 * [ Next-Gen Identity Security ](https://www.crowdstrike.com/en-us/blog/category.identity-protection/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/Identity-Protection.svg) Next-Gen Identity Security [ ![Solving the Continuous Authorization Conundrum](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Continuous-Identity?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Solving the Continuous Authorization Conundrum ](https://www.crowdstrike.com/en-us/blog/solving-the-continuous-authorization-conundrum/) 10/08/26 [ ![CrowdStrike Announces Agentic Identity Provider](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-FalCon-AgenticIdentity?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Announces Agentic Identity Provider ](https://www.crowdstrike.com/en-us/blog/crowdstrike-announces-agentic-identity-provider/) 09/02/26 [ ![The Identity Problem Hiding in AI Agent Deployments ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Agentic-Identity?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) The Identity Problem Hiding in AI Agent Deployments ](https://www.crowdstrike.com/en-us/blog/the-identity-problem-hiding-in-ai-agent-deployments/) 06/24/26 [ ![CrowdStrike Announces Continuous Identity for AI Agents](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Continuous-Identity?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Announces Continuous Identity for AI Agents ](https://www.crowdstrike.com/en-us/blog/crowdstrike-announces-continuous-identity-for-ai-agents/) 06/15/26 * [ Next-Gen SIEM & Log Management ](https://www.crowdstrike.com/en-us/blog/category.observability-and-log-management/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Next-Gen-SIEM-LOG-Management.svg) Next-Gen SIEM & Log Management [ ![CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-EMBER2024?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX ](https://www.crowdstrike.com/en-us/blog/crowdstrike-hunts-for-shell-command-obfuscation-vmware-esx/) 08/07/26 [ ![Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-FalconPlatformIOA?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats ](https://www.crowdstrike.com/en-us/blog/falcon-platform-ioas-arrive-in-falcon-next-gen-siem/) 07/29/26 [ ![5 High-Impact Use Cases for Falcon Onum](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Onum-Lines?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) 5 High-Impact Use Cases for Falcon Onum ](https://www.crowdstrike.com/en-us/blog/five-high-impact-use-cases-for-falcon-onum/) 07/27/26 [ ![Falcon Next-Gen SIEM Supports Third-Party EDR Tools, Starting with Microsoft Defender](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-NGS-Exponential?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Falcon Next-Gen SIEM Supports Third-Party EDR Tools, Starting with Microsoft Defender ](https://www.crowdstrike.com/en-us/blog/falcon-next-gen-siem-supports-third-party-edr-tools-starting-with-microsoft-defender/) 03/23/26 * [ Public Sector ](https://www.crowdstrike.com/en-us/blog/category.public-sector/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blogicon-test-4.png) Public Sector [ ![CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-FalConGov-Roundup?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS ](https://www.crowdstrike.com/en-us/blog/crowdstrike-expands-federal-soc-modernization-via-cisa-siemaas/) 10/01/26 [ ![CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04 ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Gov-Scroll?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04 ](https://www.crowdstrike.com/en-us/blog/crowdstrike-falcon-platform-helps-meet-us-government-mandates-cisa-bod-26-04/) 07/22/26 [ ![Falcon Platform for Government Now Offers Falcon for XIoT to Secure Connected Assets ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-FalConGov-XIoT?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Falcon Platform for Government Now Offers Falcon for XIoT to Secure Connected Assets ](https://www.crowdstrike.com/en-us/blog/falcon-platform-for-government-now-offers-falcon-for-xiot-to-secure-connected-assets/) 03/18/26 [ ![CrowdStrike Innovates to Modernize National Security and Protect Critical Systems ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-FalConGov-Roundup?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Innovates to Modernize National Security and Protect Critical Systems ](https://www.crowdstrike.com/en-us/blog/crowdstrike-innovates-to-modernize-national-security-and-protect-critical-systems/) 03/18/26 * [ Exposure Management ](https://www.crowdstrike.com/en-us/blog/category.exposure-management/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/BlogIcon-test-image-2.svg) Exposure Management [ ![October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-PT-2025?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities ](https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-october-2026/) 10/13/26 [ ![CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Forrester%20Wave%20Proactive%20Security%20Platform%20Wave%202026-2-1060x698_Blog?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026 ](https://www.crowdstrike.com/en-us/blog/crowdstrike-named-leader-forrester-wave-proactive-security-platforms-q3-2026/) 09/24/26 [ ![September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-PT-2025?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs ](https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-september-2026/) 09/08/26 [ ![August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-PT-2025?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs ](https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-august-2026/) 08/11/26 * [ Securing AI ](https://www.crowdstrike.com/en-us/blog/category.securing-ai/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blogicon-test-3.svg) Securing AI [ ![Why Organizations Secure AI Agents with Falcon Guardian](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-AIDR-Protection?wid=2048&hei=1349&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Why Organizations Secure AI Agents with Falcon Guardian ](https://www.crowdstrike.com/en-us/blog/why-organizations-secure-ai-agents-with-falcon-guardian/) 10/23/26 [ ![CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Architecture-of-Agentic-Defense?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage ](https://www.crowdstrike.com/en-us/blog/crowdstrike-anthropic-critical-infrastructure-defense-program/) 10/08/26 [ ![Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-NPM-SupplyChain?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers ](https://www.crowdstrike.com/en-us/blog/how-attackers-can-bypass-llm-safety-classifiers/) 10/06/26 [ ![A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Integration?wid=1544&hei=1018&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack ](https://www.crowdstrike.com/en-us/blog/crowdstrike-nvidia-extend-security-across-ai-stack/) 09/28/26 * [ Data Security ](https://www.crowdstrike.com/en-us/blog/category.data-security/) ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/data-protection-red.svg) Data Security [ ![Falcon Data Security for SaaS Secures Sensitive Data in Microsoft 365](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Strengthen-Data-Security?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Falcon Data Security for SaaS Secures Sensitive Data in Microsoft 365 ](https://www.crowdstrike.com/en-us/blog/falcon-data-security-for-saas-secures-sensitive-data/) 10/05/26 [ ![CrowdStrike Accelerates Real-Time Data Classification with On-Device AI](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-On-Device-AI-Main?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) CrowdStrike Accelerates Real-Time Data Classification with On-Device AI ](https://www.crowdstrike.com/en-us/blog/crowdstrike-accelerates-real-time-data-classification-with-on-device-ai/) 09/16/26 [ ![ISO 42001:2023 and the New Reality of Cloud AI Data Risk](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Data-Protection-Day-2026?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) ISO 42001:2023 and the New Reality of Cloud AI Data Risk ](https://www.crowdstrike.com/en-us/blog/iso-42001-2023-and-new-reality-of-cloud-ai-data-risk/) 06/04/26 [ ![Falcon Data Security Secures Data Wherever It Lives and Moves](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-Strengthen-Data-Security?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Falcon Data Security Secures Data Wherever It Lives and Moves ](https://www.crowdstrike.com/en-us/blog/falcon-data-security-secures-data-wherever-it-lives-and-moves/) 03/24/26 * [Start Free Trial](https://www.crowdstrike.com/products/trials/try-falcon-prevent) * [Featured](https://www.crowdstrike.com/en-us/blog/featured-articles/) * [Recent](https://www.crowdstrike.com/en-us/blog/recent-articles/) * [Video](https://www.crowdstrike.com/en-us/blog/videos/) * [Category](https://www.crowdstrike.com/en-us/blog/categories-overview/) * [Start Free Trial](https://www.crowdstrike.com/products/trials/try-falcon-prevent) __ # CrowdStrike Uncovers New Agentic AI Campaigns ## CrowdStrike Counter Adversary Operations details research into four previously unreported threat actors conducting campaigns in which AI agents make decisions and execute commands. October 21, 2026 • [ CrowdStrike Counter Adversary Operations](https://www.crowdstrike.com/en-us/blog/author.crowdstrike-counter-adversary-operations/ "Posts by CrowdStrike Counter Adversary Operations") • [Threat Hunting & Intel](https://www.crowdstrike.com/en-us/blog/category.counter-adversary-operations/ "Threat Hunting & Intel") ![](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-AgenticAI-Report?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) A [new report from the CrowdStrike Counter Adversary Operations team](https://www.crowdstrike.com/en-us/resources/reports/agentic-ai-attack-campaigns/) details research into four previously unreported threat actors, each of whom left their offensive agent frameworks exposed via open directories. In doing so, they shared detailed insight into their use of AI agents and revealed how adversaries are quickly becoming more proficient in AI. AI is changing the speed and scale of cyber operations. Counter Adversary Operations, which brings together the CrowdStrike Intelligence and CrowdStrike OverWatch teams, is closely watching. Between May and August 2026, CrowdStrike Intelligence documented several incidents in which threat actors used AI not only to create tooling or artifacts, but to conduct agentic campaigns in which AI agents make decisions and execute commands. ## About the Adversaries Below is a high-level overview of the threat actors behind these campaigns: **Threat Actor 1** A Spanish/English-speaking operator that has compromised at least 15 Argentina-based healthcare entities and exfiltrated credentials and medical records from at least one victim. The threat actor ran a purpose-built autonomous penetration testing (pentesting) harness against Argentine healthcare organizations. They implemented a dual-agent architecture in which a “Supervisor” Claude Code agent selects the next task from a state machine (i.e., a predefined workflow of attack stages) and an “Executor” agent performs the task. This framework is derived from the open-source PentestGPT project, but the threat actor has rebuilt it with additional MCP servers, Python-based exploitation scripts, and skills. **Threat Actor 2** A Chinese-speaking operator with 20+ named global targets. They compromised government entities of two countries and targeted private sector entities in Brazil and the U.S., including entities in biotech, healthcare, food and beverage, retail, technology, and travel. This threat actor primarily accessed Claude models via a China-based AI proxy service (aka a “transfer station”), and they built two pentesting harnesses that grant Claude Code varying levels of autonomy. One harness consists of a Python-based project that deterministically conducts reconnaissance and then asks an AI provider to choose among a preestablished set of possible actions that are deterministically routed to the appropriate agent. A different harness provides more agentic flexibility, allowing Claude Code to operate either as a single agent pursuing a target according to an elaborate standard operating procedure, or delegating actions to multiple specialist agents in parallel. **Threat Actor 3** The least sophisticated of the four in this report is an Indonesian-speaking actor that uses 819 skills (overwhelmingly sourced from public GitHub repositories, primarily claude-red1) without additional orchestration to enable Claude Code to conduct intrusion campaigns. In these campaigns, the threat actor instructs Claude Code to compromise a target and assumes the skills will offer sufficient guidance to ensure the intrusion succeeds. However, in the observed activity, the threat actor periodically had to intervene to overcome the model’s safety guardrails or to exhort Claude Code to keep trying to overcome a particular barrier. Despite their limited grasp of security fundamentals, the threat actor still used Claude Code to compromise several Indonesian government domains, a government domain of another country, and several private-sector entities. **Threat Actor 4** Threat Actor 4 is a group of Russian-speaking individuals. They exfiltrated corporate client data from a U.S.-based customer relationship management vendor and compromised several private-sector SaaS and data center entities based in Russia, Kyrgyzstan, and the U.S., in addition to one government domain of another country. This threat actor uses a single /pentest-setup slash command to task Claude Code with a seven-step workflow. This workflow provides guidance for enumerating the target environment, grants Claude Code near-total autonomy in selecting exploitation methods, defines a high-level post-remote code execution workflow, and provides explicit exfiltration instructions. ## What This Means for Defenders The four cases [documented in this report](https://www.crowdstrike.com/en-us/resources/reports/agentic-ai-attack-campaigns/) likely demonstrate that agentic AI commoditizes baseline offensive cyber operations. This assessment is made with moderate confidence based on the included case studies, all of which showcase threat actors delegating operational decision-making across the kill chain to agentic AI. Working at machine speed, agentic AI can autonomously achieve objectives, often within an hour. Findings from these cases likely support the following assessments: * **Agentic AI-supported intrusions will almost certainly increase** in volume and sophistication, an assessment made with high confidence based on threat actors’ rapid adoption of agentic AI, the effectiveness of the agentic AI-supported intrusions, the continuous improvements in AI models, and the proliferation of open-source offensive agent frameworks.2 * **Agentic AI will reduce barriers to effective intrusions** as we expect over the next 12 months, some low-skill threat actors will likely use agentic AI to conduct campaigns at a level of effectiveness and scale previously only achievable by organized criminal groups or state-nexus actors. * Some threat actors will likely improve the OPSEC of their agentic intrusion campaigns over the next 12 months, an assessment made with moderate confidence based on AI development trends and trusted open-source reporting. The team’s findings expand on how these adversaries weaponize AI coding assistants and enable long-term agentic operations using different methodologies. [Download the full report](https://www.crowdstrike.com/en-us/resources/reports/agentic-ai-attack-campaigns/) for detailed case studies and guidance on how defenders can respond to this activity. 1 https[:]//github[.]com/SnailSploit/Claude-Red 2 https[:]//github[.]com/vxcontrol/pentagi [ ](https://www.linkedin.com/shareArticle) [ ](https://twitter.com/share) * * * #### Related Content [ ![Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation ](https://assets.crowdstrike.com/is/image/crowdstrikeinc/CS_Blog-Update_02-1?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Threat Hunting & Intel | Oct 23, 2026 Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation ](https://www.crowdstrike.com/en-us/blog/obstacles-to-weaponizing-php2shell-likely-constrain-exploitation/) [ ![U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance](https://assets.crowdstrike.com/is/image/crowdstrikeinc/Blog-LABYRINTH-CHOLLIMA?wid=1060&hei=698&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Threat Hunting & Intel | Oct 13, 2026 U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance ](https://www.crowdstrike.com/en-us/blog/fbi-disrupts-famous-chollima-operation-with-crowdstrike-assistance/) [ ![Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance](https://assets.crowdstrike.com/is/image/crowdstrikeinc/0523_01_APAC-Cross-Boarder-Transfer-Systems_03-1024x674?wid=1024&hei=674&fmt=png-alpha&qlt=95,0&resMode=sharp2&op_usm=3.0,0.3,2,0) Threat Hunting & Intel | Oct 07, 2026 Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance ](https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/) __ Categories * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/Agentic-SOC-Blog-icon.svg) Agentic SOC 55 ](https://www.crowdstrike.com/en-us/blog/category.ai-machine-learning/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Cloud-Application-Security.svg) Cloud & Application Security 150 ](https://www.crowdstrike.com/en-us/blog/category.cloud-security/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/data-protection-red.svg) Data Security 27 ](https://www.crowdstrike.com/en-us/blog/category.data-security/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/Endpoint-Security-And-XDR.svg) Endpoint Security & XDR 362 ](https://www.crowdstrike.com/en-us/blog/category.endpoint-protection/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Engineering-and-Tech.svg) Engineering & Tech 87 ](https://www.crowdstrike.com/en-us/blog/category.engineering-and-technology/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Exec-Viewpoint.svg) Executive Viewpoint 181 ](https://www.crowdstrike.com/en-us/blog/category.executive-viewpoint/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/BlogIcon-test-image-2.svg) Exposure Management 127 ](https://www.crowdstrike.com/en-us/blog/category.exposure-management/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Front-Lines.svg) From The Front Lines 207 ](https://www.crowdstrike.com/en-us/blog/category.from-the-front-lines/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/Identity-Protection.svg) Next-Gen Identity Security 76 ](https://www.crowdstrike.com/en-us/blog/category.identity-protection/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Next-Gen-SIEM-LOG-Management.svg) Next-Gen SIEM & Log Management 116 ](https://www.crowdstrike.com/en-us/blog/category.observability-and-log-management/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blogicon-test-4.png) Public Sector 44 ](https://www.crowdstrike.com/en-us/blog/category.public-sector/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blogicon-test-3.svg) Securing AI 56 ](https://www.crowdstrike.com/en-us/blog/category.securing-ai/) * [ ![](https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/icons/blog/Counter-Adversary-Ops.svg) Threat Hunting & Intel 229 ](https://www.crowdstrike.com/en-us/blog/category.counter-adversary-operations/) ###### CrowdStrike Falcon Platform ##### Ready to protect your business? Try CrowdStrike free today [Start free trial](https://www.crowdstrike.com/products/trials/try-falcon-prevent) ##### Subscribe Sign up now to receive the latest notifications and updates from CrowdStrike Subscribe ##### See CrowdStrike Falcon in action [Explore demos](https://www.crowdstrike.com/products/demos/) [ ![logo](https://assets.crowdstrike.com/is/content/crowdstrikeinc/black-crowdstrike-logo-footer) ](https://www.crowdstrike.com/en-us/) * [ __](https://x.com/CrowdStrike) * * [ __](https://www.linkedin.com/company/crowdstrike) * [ __](http://www.youtube.com/user/CrowdStrike) * Copyright © 2026 CrowdStrike * [ Privacy ](https://www.crowdstrike.com/privacy-notice/) * [ Request Info ](https://www.crowdstrike.com/services/request-information/) * [ Blog ](https://www.crowdstrike.com/blog/) * [ Contact Us ](https://www.crowdstrike.com/contact-us/) * 1.888.512.8906 * [ Accessibility ](https://www.crowdstrike.com/en-us/blog/crowdstrike-uncovers-new-agentic-ai-campaigns/#) --- > 📦 **Full-Text Markdown Snapshot** archived by [Phying News](https://phying.com/item/10292) · Original source: [crowdstrike.com](https://www.crowdstrike.com/en-us/blog/crowdstrike-uncovers-new-agentic-ai-campaigns/)