CrowdStrike attributes the supply chain attack on one of npm's most popular HTTP libraries to STARDUST CHOLLIMA, a DPRK-nexus threat actor. The compromise deployed cross-platform ZshBucket malware to Linux, macOS, and Windows — and Axios is downloaded over 100,000 times per week.
CrowdStrike unveils Falcon Data Security for the agentic enterprise, Agentic MDR with NVIDIA Nemotron-powered reasoning (5x faster investigations), and adversary-informed cloud risk prioritization — a triple launch that signals how seriously the industry's largest endpoint vendor is taking the AI agent threat surface.
CrowdStrike expands Falcon AIDR to desktop AI apps, launches shadow AI discovery for endpoints, cloud, and SaaS platforms, and adds Microsoft Defender support to Next-Gen SIEM. CEO George Kurtz calls 2026 the 'breakout year for the agentic SOC.'
CrowdStrike and NVIDIA unveil a Secure-by-Design AI Blueprint that integrates Falcon security directly into NVIDIA's OpenShell agent runtime — embedding protection at the foundation of autonomous systems rather than bolting it on after deployment.