CrowdStrike
3 stories filed under CrowdStrike on Beyond Market Intelligence. The newest of them: “When dinner plans become data breaches, it's time to explore device security.”, “The npm supply chain attack that earned its trust before striking.”, and “Multi-turn attacks expose the blind spot in AI red-teaming programs”. The spring intrusion at an agricultural conference on Hainan Island didn't begin with a phishing email or a network breach. The keyv worm didn't fake its security check. Acme AI is the next-generation, AI-powered spreadsheet platform built to replace Excel and redefine how analysts, data scientists, and enterprise teams work… The list below is every CrowdStrike story on Beyond Market Intelligence, newest first.
When dinner plans become data breaches, it's time to explore device security.
The spring intrusion at an agricultural conference on Hainan Island didn't begin with a phishing email or a network breach. It began when someone walked into a hotel room and booted an executive's laptop from a USB stick while the owner was at dinner. CrowdStrike's OVERCAST PANDA campaign exploited a gap that's been sitting in plain sight for years: the window between physical access and the next boot. The fix isn't new technology. It's firmware settings most companies never deployed. That's not a product problem.
The npm supply chain attack that earned its trust before striking.
The keyv worm didn't fake its security check. It earned one. That's the part that should unsettle every security team. The poisoned releases shipped with valid provenance signatures because they ran through the maintainer's own pipeline. Valid credentials, not a broken control, did the damage. The trust signals built to secure the supply chain were satisfied by an attacker holding the right account. That's not a bug in the machinery. It's the shape of the exposure.
Multi-turn attacks expose the blind spot in AI red-teaming programs
Cisco's multi-turn attack study should end the illusion that single-shot red teaming tells you anything about your AI agents. When 15 flagship models were hit with 6,986 adaptive, conversational attacks, attackers broke through 88.3% of the time. That's not an edge case. It's the default. Single-turn testing didn't just miss the risk; it ranked models in a completely different order than multi-turn testing did. If you're still testing agents like they're static code, you're not testing at all.