August 2023 Summaries

The blog post highlights CrowdStrike's recognition and initiatives in advancing cybersecurity, particularly emphasizing their leadership in managed detection and response services as reported by The Forrester Wave and IDC MarketScape. It discusses the company's focus on improving cloud security by addressing common misconfigurations that facilitate adversary activities, such as unrestricted outbound access, disabled logging, and excessive account permissions. CrowdStrike has assembled a global team of specialists to combat the rising threat within cloud environments, underscoring the importance of cloud security posture management as a critical component of a robust security strategy. The post further illustrates the company's dedication to innovation in AI and machine learning to enhance security measures and maintain vigilance against evolving threats, offering various assessments and solutions to help organizations protect their cloud platforms and mitigate risk.

The text highlights CrowdStrike's ongoing efforts in advancing cybersecurity, particularly through its collaboration on the TRAM II project with the MITRE Engenuity Center for Threat-Informed Defense. This initiative aims to streamline the integration of the MITRE ATT&CK framework into security implementations by automating the classification of tactics, techniques, and procedures in cyber threat intelligence reports using machine learning models like SciBERT. CrowdStrike's involvement reflects its commitment to innovation in cybersecurity, leveraging artificial intelligence and machine learning to enhance threat intelligence and defense capabilities. The TRAM II project demonstrates the potential for reducing the complexity and cost of threat intelligence mapping, ultimately benefiting producers and consumers of threat intelligence by providing more consistent and accurate annotations.

The blog discusses the Windows Restart Manager, a library designed to reduce required reboots during software updates by allowing applications to shut down processes that lock resources. It elaborates on how the Restart Manager operates, enabling programs to verify that no applications will block the resources they need before executing operations, particularly during updates. The Restart Manager can be used legitimately by installers to ensure resources are available, but it also poses a risk as its termination mechanisms can be exploited for malicious purposes. The blog promises a follow-up article that will explore how malicious actors can hijack these functionalities and how applications can protect themselves against such exploits, with insights on how the CrowdStrike Falcon platform can provide visibility into these types of attacks.

CrowdStrike has highlighted a significant increase in identity-based attacks, with a notable rise in Kerberoasting incidents and access broker advertisements on the dark web. These trends underscore the evolving tactics of adversaries who are increasingly targeting identity credentials rather than exploiting traditional software vulnerabilities. In response, CrowdStrike has introduced a new identity threat hunting capability within its Falcon OverWatch Elite, offering enhanced visibility and early detection of compromised credentials across environments. This service aims to provide proactive defenses against identity threats by leveraging identity telemetry to identify unauthorized access, complemented by 24/7 monitoring and analysis via the AI-powered Falcon platform. This approach is part of a broader strategy to fortify cybersecurity measures amid a shifting threat landscape, emphasizing the need for continuous vigilance and advanced detection techniques to protect against sophisticated cyber attacks.

CrowdStrike's blog highlights the cybersecurity challenges faced by the healthcare industry, emphasizing the critical role of robust cybersecurity measures amidst rising operational costs, declining reimbursements, and labor shortages. The text delves into the increased frequency and sophistication of cyberattacks on healthcare institutions, citing a 74% rise in weekly cyberattacks in 2022 and significant financial repercussions, such as data breach costs reaching $10 million or more. CrowdStrike underscores the importance of integrating cybersecurity into risk management and governance frameworks to prevent disruptions and ensure high-quality care. The post also introduces the CrowdStrike Falcon® platform, which offers comprehensive security solutions leveraging machine learning and human expertise to address these challenges, including endpoint protection, threat intelligence, and breach prevention during mergers and acquisitions. CrowdStrike's commitment to safeguarding healthcare organizations is further exemplified by its Falcon Complete managed detection and response service, which provides 24/7 protection and is supported by a breach prevention warranty.

CrowdStrike and Google have partnered to enhance cybersecurity in K-12 school districts, focusing on safeguarding ChromeOS devices against rising cyber threats. This collaboration integrates CrowdStrike's Falcon platform with Google's ChromeOS data to offer comprehensive security management, improving visibility and response capabilities without the need for additional agents or mobile device management solutions. This partnership addresses the challenges of limited resources, rising cyberattacks, and the diverse device landscape in educational institutions, ensuring that sensitive student data is protected and compliant with privacy regulations. By centralizing security management and enhancing incident response, the partnership aims to create a secure learning environment, allowing students and educators to utilize technology without the fear of cyber threats.

CrowdStrike's recent updates highlight its strategic advancements in cybersecurity, focusing on cloud security, threat detection, and exposure management. The company emphasizes the importance of external attack surface management (EASM) in securing cloud environments, as cloud exploitation and misconfigurations present significant risks. EASM helps organizations maintain comprehensive visibility of their digital assets, prioritize risks, and mitigate potential threats. By integrating EASM with Falcon Cloud Security, CrowdStrike offers a unified platform that provides both agent-based and agentless protection, enhancing an organization's ability to safeguard its cloud assets against breaches. This approach underscores the necessity for real-time monitoring and proactive security measures in the evolving landscape of cloud-based threats, as evidenced by the rise in cloud exploitation incidents reported in the CrowdStrike 2023 Global Threat Report.

CrowdStrike's blog highlights its advancements and recognition in cybersecurity through various achievements and strategic initiatives as of 2025. The company has been recognized as a leader in multiple industry evaluations, including the 2025 IDC MarketScape for Worldwide Incident Response Services and Exposure Management, and the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platforms. CrowdStrike is also expanding its capabilities through acquisitions, such as the acquisition of Onum to enhance how data powers the Security Operation Center (SOC). The Falcon platform, known for its AI-driven security solutions, has been instrumental in preventing sophisticated attacks, including zero-day exploits. CrowdStrike continues to innovate and bolster its offerings in areas like cloud security, threat hunting, and identity protection, while also maintaining a focus on small business cybersecurity solutions. The company emphasizes the importance of layered defenses against unknown vulnerabilities and is actively engaged in threat intelligence and adversary operations to protect its clients.

The text highlights CrowdStrike's recent advancements in cybersecurity, emphasizing its strategic initiatives and innovations in various domains including AI, cloud security, identity protection, and endpoint security. Notably, CrowdStrike launched Threat AI, the first agentic threat intelligence system, and integrated new identity security features to enhance protection across domains. The company has been recognized as a leader in several industry reports for its solutions in managed detection and response services, CNAPP, and exposure management. CrowdStrike also addresses the evolving threat landscape by securing AI development, preventing data leaks, and enhancing vulnerability management with risk-based patching. The text underscores the importance of a comprehensive cybersecurity strategy, encouraging regular reviews of patching protocols and the adoption of holistic security measures to mitigate vulnerabilities.

CrowdStrike has unveiled several significant advancements in cybersecurity, focusing on identity security, cloud protection, and threat intelligence. The company introduced its Counter Adversary Operations, which combines Falcon OverWatch with CrowdStrike Intelligence to combat modern breaches effectively. The 2023 Threat Hunting Report highlights a dramatic rise in identity-focused attacks, including a 583% increase in Kerberoasting attacks and a notable surge in cloud-based intrusions. In response, CrowdStrike launched Falcon OverWatch Elite Identity Threat Hunting to provide 24/7 protection against identity-based threats. Additionally, the company is enhancing its cybersecurity offerings with AI-powered solutions and has been recognized as a leader in various industry reports. These developments underscore CrowdStrike's commitment to staying ahead of evolving cyber threats by leveraging advanced technology and intelligence-driven strategies.

CrowdStrike's Falcon platform achieved a flawless 100% attack detection rate with zero false positives in the Q2 2023 SE Labs Enterprise Advanced Security (EAS) test, earning the AAA award for its exceptional performance. The evaluation involved real-world tactics from formidable adversary groups and tested the platform's ability to detect and classify threats across all stages of an attack without prevention measures, focusing on detection accuracy and minimizing false positives. This achievement underscores CrowdStrike's commitment to transparency and independent testing, highlighting the Falcon platform's effectiveness in stopping sophisticated cyber threats while maintaining a low total cost of ownership. The success of the platform in these rigorous tests illustrates its advanced machine learning, artificial intelligence, and cloud-native architecture capabilities, reinforcing CrowdStrike's leadership in the cybersecurity industry.

CrowdStrike is recognized as a leader in cloud-delivered security solutions, particularly for its advanced threat intelligence capabilities integrated into the Falcon platform. The company has been consistently acknowledged for its excellence in threat intelligence, receiving accolades such as the Forrester Wave Leader in External Threat Intelligence Services Providers for Q3 2023. CrowdStrike's Falcon Intelligence modules provide comprehensive threat intelligence that empowers security teams to make informed decisions, defend against sophisticated adversaries, and enhance cyber resilience. The Falcon platform's strength lies in its global data collection strategy, enabling real-time visibility into attacks and providing actionable intelligence that integrates seamlessly into daily security operations. CrowdStrike's offerings extend to endpoint, cloud security, identity protection, and more, supported by a team of seasoned intelligence analysts who tailor their expertise to meet the unique security challenges of different organizations.