Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Falcon Cloud Security CLI Scanner for Container Images: Demo Drill Down

The latest release of the Falcon Cloud Security CLI equips developers with advanced container image scanning capabilities built directly into the development workflow. Contact us to learn how you can find threats faster with Falcon Cloud Security. Subscribe and Stay Updated: ► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos.

Falcon Cloud Security AI Security Posture Management (AI-SPM): Demo Drill Down

Unify AI visibility with AI-SPM, Detect AI package vulnerabilities, Expose AI packages in the cloud, Fix AI model risks fast. Find threats faster and stop breaches in your AI pipeline with Falcon Cloud Security. Subscribe and Stay Updated: ► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos.

CrowdStrike Falcon Next-Gen SIEM Correlation Rule Template Discovery Dashboard

Finding the right detection content can be a challenge. The Correlation Rule Template Discovery Dashboard in CrowdStrike Falcon Next-Gen SIEM makes it easy to discover, explore, and activate relevant correlation rules—based on the data you already ingest. This demo highlights key features like compatibility mapping, real-time data source health, and automatic surfacing of new and updated templates. Stay aligned with the latest threats and streamline detection engineering in just a few clicks.

Falcon Cloud Security Unified Protection for VMware Environments: Demo Drill Down

Whether securing applications in Tanzu or gaining full visibility into VMware vCenter assets, Falcon Cloud Security allows organizations to confidently protect their critical VMware workloads. Contact us to learn how you can find threats faster with Falcon Cloud Security.

Dynamic Lookup Tables with Falcon Fusion SOAR

Operationalizing external data is essential for smarter and faster threat detection. Falcon Next-Gen SIEM and Fusion SOAR make it easy with new HTTP Request and Lookup File actions. Security teams can now dynamically pull data from third party sources into automated workflows without writing a line of code. These inputs are instantly converted into lookup tables that enrich detections in real time, powering precision and speed at machine scale.

CrowdStrike Falcon Prevents Supply Chain Attack Involving Compromised NPM Packages

Recently, five popular NPM (Node Package Manager) packages were compromised and modified to deliver a malicious DLL, dubbed “Scavenger”. The malware pushed via these compromised NPM packages executes in two stages: an initial first-stage loader, followed by a second-stage infostealer. NPM is the package manager for the Node.js JavaScript platform, which allows developers to share and manage JavaScript libraries and tools.

Preventing Container Escape Attempts with Falcon Cloud Security's Enhanced Runtime Capabilities

Container escape represents one of the most significant security threats in modern cloud computing environments. This allows attackers to break free from container isolation mechanisms, potentially leading to complete compromise of host systems and broader cloud infrastructure.

CrowdStrike Ranked #1 in 2025 Frost Radar for MDR

CrowdStrike Falcon Complete Next-Gen MDR has been ranked in the 2025 Frost Radar: Global Managed Detection and Response, securing the top placement among 19 vendors and leading in both Innovation and Growth. This recognition validates CrowdStrike’s leadership in delivering round-the-clock managed detection and response (MDR) protection through the combination of elite expertise and AI-accelerated investigation and response powered by the AI-native CrowdStrike Falcon platform.

Falcon Cloud Security - Accelerate Cloud investigations powered by Charlotte AI

Charlotte AI automatically triages detections with supporting evidence, autonomously generates and answers prioritized questions, and embeds AI reasoning directly into workflow automation to drive scalable action across cloud environments. Subscribe and Stay Updated:► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos. Thank you for watching!

CrowdStrike Detects and Blocks Widespread SharePoint Zero-Day Exploitation

Beginning on July 18, 2025, at approximately 0700 UTC, CrowdStrike Falcon Complete Next-Gen MDR and CrowdStrike Falcon Adversary OverWatch identified a wave of Microsoft SharePoint exploitation attempts by an unknown adversary. Two distinct zero-day vulnerabilities were made publicly available: a critical remote code execution vulnerability (CVE-2025-53770) and a server spoofing vulnerability (CVE-2025-53771).

CrowdStrike Named a Strong Performer in Forrester Wave for Unified Vulnerability Management

CrowdStrike is proud to be named a Strong Performer in The Forrester Wave: Unified Vulnerability Management Solutions, Q3 2025. We believe this recognition underscores the strength of CrowdStrike’s vision, the pace of our innovation, and the rapid adoption of CrowdStrike Falcon Exposure Management by customers transforming their vulnerability management, just 24 months after its launch.

Secure Employee Offboarding with Workday Integration

The offboarding phase is a critical time to manage risk and protect sensitive data. With the new Workday integration, departing users are automatically added to a designated Active Directory group. Falcon Identity Protection and Falcon Data Protection then apply real-time controls to block unauthorized access and prevent data exfiltration—watch the demo to see it in action!

CrowdStrike Named a Leader in the 2025 GigaOm SIEM Radar Report

CrowdStrike is proud to be named a Leader and Fast Mover in the 2025 GigaOm Radar for Security Information and Event Management (SIEM). This recognition positions CrowdStrike Falcon Next-Gen SIEM as the core of the AI-native SOC and future of security operations. CrowdStrike earned perfect 5/5 scores in key areas including Attack Surface Coverage, LLM-Based Co-Pilot and Agents, Automation, and Threat Research Units.

Stop Ransomware Over SMB with Falcon Endpoint Security: Demo Drill Down

Ransomware is evolving—and it's targeting your blind spots. Attackers now encrypt files remotely over SMB shares using stolen credentials and unmanaged systems, bypassing traditional defenses. CrowdStrike closes this gap with File System Containment, a powerful Falcon Endpoint Security feature that detects ransomware-style behaviors like mass encryption and blocks destructive file actions instantly—directly at the endpoint, without relying on cloud checks or process termination.

Vulnerability Impact Translation with Falcon Exposure Management

This demo shows how Charlotte AI transforms raw vulnerability data from Falcon Exposure Management into a CISO-ready report. By pulling enriched insights from Next-Gen SIEM—like ExPRT.AI scores and asset criticality—the workflow translates technical signals into business risk. The result: a clear, automated email that highlights key trends, impacted systems, and actionable remediation paths. CrowdStrike Exposure Management.

One Year Later: Reflecting on Building Resilience by Design

The one-year anniversary of July 19 marks a moment that deeply impacted our customers and partners and became one of the most defining chapters in CrowdStrike’s history. The incident impacted systems globally, and we responded with urgency and focus. That day reinforced the responsibility we’ve always carried as guardians of our customers’ digital infrastructure and trust.

Stop Remote Ransomware Attacks with Falcon Endpoint Security

Ransomware is a rapidly evolving threat, with attackers increasingly turning to remote techniques that target network shares. To help defend against these tactics, CrowdStrike Falcon Prevent endpoint security includes a capability called File System Containment, which is precision-focused to block malicious file system actions over Windows Server Message Block (SMB) shares, halting encryption as soon as possible.

AI-Powered Email Threat Detection and Response with Next-Gen SIEM

Email remains the top attack vector, and speed is critical when every second counts. Falcon Next-Gen SIEM and Fusion SOAR streamline detection by ingesting email telemetry and automating investigation with Charlotte AI. By analyzing sender behavior and message content, Charlotte AI delivers real-time, human-readable verdicts with confidence scoring. Teams can quickly isolate threats, block senders, or escalate suspicious activity. With AI-powered workflows and automation, email triage becomes faster, more precise, and scalable.

Charlotte AI - Agentic Workflows: Vulnerability Impact Translation

Vulnerabilities pile up fast, but which ones truly matter to your business? With Charlotte AI Agentic Workflows, CrowdStrike turns overwhelming technical data into business-ready intelligence so you can prioritize what really counts. By pulling real-time vulnerability insights from Falcon Exposure Management, Charlotte AI evaluates what systems are at risk, how many users could be impacted, and what services or revenue streams are on the line. In this demo, you’ll see how AI-driven reasoning translates CVEs and severity scores into clear business impact, no manual analysis required.

See Falcon for XIoT in Action

See how CrowdStrike Falcon for XIoT delivers real-time visibility, AI-powered risk prioritization with ExPRT.AI, and safe protection for connected assets across industrial, IoT, and OT environments. This demo shows how Falcon discovers hard-to-reach XIoT assets in minutes, re-scores vulnerabilities with real attacker context, and helps you focus on what matters most, all while maintaining operational continuity.

CrowdStrike Services Observes SCATTERED SPIDER Escalate Attacks Across Industries

SCATTERED SPIDER, an eCrime adversary, has recently broadened its target scope to include the aviation sector, in addition to its established focus on the insurance and retail industries, as observed by CrowdStrike Services. Throughout Q2 2025, SCATTERED SPIDER's activities have primarily centered on U.S.-based insurance and retail entities, along with U.K.-based retail entities.

Prescription for Protection: Healthcare Industry Observations from CrowdStrike Investigations

The healthcare sector continues to be a prime target for cyber adversaries, with threat actors constantly evolving their tactics to exploit vulnerabilities. Over the past year, CrowdStrike Services responded to a growing number of financially motivated attacks aimed at encrypting data and extorting victims across the healthcare ecosystem.