September 2025 Summaries

CrowdStrike's Fall 2025 release highlights its strategic advancements in cybersecurity, particularly through the introduction of the Agentic Security Operations Center (SOC) aimed at securing the AI era. The company emphasizes the role of Falcon Application Security Posture Management (ASPM) in protecting generative AI applications by providing visibility and context to address the unique security challenges posed by these technologies. Falcon ASPM aids in mapping complex application architectures, monitoring runtime behaviors, and detecting potential security threats such as memory poisoning and privilege misuse. By leveraging AI-powered tools like CrowdStrike Charlotte AI within its own infrastructure, the company demonstrates how continuous evaluation and alignment with standards such as the OWASP Agentic AI Threats and Mitigations framework can enhance security measures. This approach not only strengthens CrowdStrike's own defenses but also refines its products to help customers secure advanced applications, illustrating the company's commitment to evolving security alongside technological innovation.

CrowdStrike has introduced the Correlation Rule Template Discovery dashboard within its Falcon Next-Gen SIEM platform, aimed at enhancing the efficiency of Security Operations Centers (SOCs) by allowing them to discover, adopt, and operationalize detection content more effectively. This new dashboard provides a centralized hub that aligns correlation rule templates with existing data sources, streamlining the process of identifying and implementing relevant detection content. It offers customizable search and filtering capabilities, enabling users to focus on specific data sources, detection categories, or threat priorities, thus improving detection precision. The dashboard facilitates a seamless transition from template discovery to active correlation rule deployment, reducing the time spent on manual evaluations and enhancing the overall security posture by ensuring detection efforts are always relevant. Early adopters have reported significant improvements in key security metrics, including reduced time for discovering relevant detection content and faster deployment cycles, thereby accelerating time-to-detection and minimizing wasted efforts.

At Fal.Con 2025, George Kurtz highlighted the need to fundamentally rethink cybersecurity in the era of AI, emphasizing the transformative potential of the agentic Security Operations Center (SOC). In this new AI-driven landscape, traditional reactive methods are becoming obsolete as AI allows adversaries to execute sophisticated, customized attacks with unprecedented speed and scale. Kurtz proposes a shift from the conventional model of security professionals acting as operators to becoming orchestrators who manage AI agents capable of autonomous action and learning. These agents, embedded within CrowdStrike's Charlotte framework, are designed to enhance security operations by automating tasks such as malware analysis and incident triage, allowing human analysts to focus on strategic oversight. The approach leverages vast amounts of curated data to train AI agents and introduces AI Detection and Response (AIDR) as a pioneering concept to secure AI systems themselves, aiming for a future where security operations achieve full autonomy. Despite the increased reliance on AI, Kurtz underscores the enduring importance of the human element in setting ethical guidelines and making strategic decisions, positioning humans as the ultimate overseers of cybersecurity in the AI age.

CrowdStrike has been recognized as a leader in the 2025 Frost Radar™: Cloud Workload Protection Platforms due to its innovative and unified approach to cloud security. The company's Falcon Cloud Security (FCS) platform provides real-time protection across hybrid and multi-cloud environments, leveraging AI-powered technology to catch risks early and prevent active attacks. This recognition highlights CrowdStrike's commitment to growth and innovation, as the platform integrates seamlessly with the broader CrowdStrike ecosystem to deliver comprehensive security across cloud, endpoint, and identity layers. By correlating events across various domains, CrowdStrike effectively addresses the sophisticated tactics used by modern adversaries, ensuring robust protection for organizations against breaches. The company's success in the market is attributed to its strong adoption of cloud workload security modules and its integration of threat intelligence and expert services into its security solutions.

CrowdStrike offers a comprehensive 15-day free trial of its cloud-based Falcon platform, designed to provide robust cybersecurity solutions for businesses. The trial includes advanced antivirus protection, device control, and mobile device safeguards, with options to explore additional modules like endpoint detection and response. Key features are supported by the CrowdStrike Security Cloud, offering real-time visibility and threat prevention without the need for hardware or additional software. The platform, recognized as a leader in the 2024 Gartner Magic Quadrant for Endpoint Protection Platforms, is praised for its efficiency, minimal manual intervention, and 100% ransomware prevention with zero false positives. CrowdStrike provides flexible pricing bundles and requires potential users to uninstall existing security solutions for optimal performance during the trial.

CrowdStrike's Falcon® Go is an AI-powered cybersecurity solution tailored for small and medium-sized businesses (SMBs), designed to provide comprehensive protection against ransomware and data breaches. This easy-to-install and user-friendly software offers next-generation antivirus (NGAV) capabilities, utilizing machine learning and behavioral detection to defend against both known and unknown cyber threats. Falcon Go includes features such as device control for USB and mobile security, ensuring continuous protection across various devices and platforms. Customers have praised its simplicity and effectiveness, with many noting its ability to function as a full security team substitute for smaller operations. Independent testing by SE Labs highlighted Falcon Go's 100% effectiveness in ransomware prevention, and users can experience its capabilities through a free 15-day trial. CrowdStrike emphasizes the importance of proactive protection to safeguard business data and reputation, positioning Falcon Go as an essential tool for modern cybersecurity needs.

CrowdStrike's Falcon Cloud Security provides comprehensive protection for AI development by integrating real-time detection of AI components into the CI/CD pipeline, scanning AI models across cloud platforms, and maintaining a real-time inventory of AI workloads in production. As AI becomes increasingly embedded in modern applications, it introduces new risks and complexities that traditional security tools struggle to address. Falcon Cloud Security ensures visibility into AI components within container images and connects build-time detections to live containers, allowing security teams to pinpoint vulnerabilities quickly. It extends protection to cloud-native AI services from providers like AWS, Azure, and Google Cloud by offering insights into model construction and risks. Furthermore, Falcon Cloud Security maintains a real-time inventory of AI-related assets, enabling organizations to trace risks from development to runtime and take informed actions to support safe AI innovation.

CrowdStrike has introduced new innovations in its Falcon Data Protection platform to address the challenges of protecting sensitive data in the era of GenAI. These enhancements aim to empower organizations by providing real-time visibility and protection across endpoints, cloud, SaaS, and AI environments, addressing the limitations of traditional data loss prevention tools. The platform now offers GenAI-specific detections, AI-powered classifications, and a new insider risk dashboard, enabling more precise data classification and proactive insider threat management. These advancements reflect CrowdStrike's commitment to redefining data protection with a unified approach that addresses the dynamic nature of modern data flows and insider risks. With general availability expected by early 2026, these innovations promise to enhance the speed and coverage required by today's data security landscape.

The blog highlights CrowdStrike's advancements in cybersecurity, emphasizing their Falcon Next-Gen Identity Security platform, which integrates phishing-resistant multifactor authentication (MFA), enhanced privileged access management, and identity-driven case management to address modern identity-based threats. These innovations are designed to protect identities across hybrid environments, counteract identity-based attacks, and simplify security operations by consolidating tools that traditionally increase complexity and risk. By leveraging agentic AI, CrowdStrike aims to streamline security processes and offer a comprehensive solution that unifies identity and endpoint protection, positioning itself as a leader in cloud workload protection and various cybersecurity sectors.

CrowdStrike has introduced a Risk-based Patching feature as part of its Falcon for IT platform, aiming to bridge the gap between IT and security teams by providing a unified approach to vulnerability management. This new feature leverages AI-powered patching and the Falcon Exposure Management to prioritize and remediate critical vulnerabilities effectively, enhancing operational efficiency and reducing breach risks. Traditional vulnerability management tools often create fragmentation between identifying and patching vulnerabilities, leading to delays and increased security risks; however, Falcon's integrated approach allows for real-time threat context and smarter decision-making. The platform also includes turnkey workflows for common IT tasks, streamlining operations and enabling seamless collaboration between security and IT teams. This consolidation of security and IT functions within a single platform not only accelerates patching but also transforms the broader operational defense strategy, ensuring a rapid, coordinated response to threats while minimizing user disruption.

CrowdStrike is enhancing its cybersecurity platform, Falcon, to address the risks associated with the rapid adoption of artificial intelligence (AI) across enterprises. The company has established partnerships with leading tech firms such as NVIDIA, AWS, Intel, Dell, Meta, and Salesforce to secure every layer of the AI stack, from infrastructure and data to models and applications. This collaboration ensures unified visibility and protection, enabling enterprises to innovate securely by replacing fragmented security tools with CrowdStrike's comprehensive solutions. By integrating capabilities like lifecycle defense, data governance, and machine-speed response, CrowdStrike positions itself as a pivotal player in the cybersecurity landscape, providing the foundational security needed for AI-powered enterprises.

CrowdStrike has been advancing cybersecurity by integrating AI technology into its security operations, marking a shift to what it terms the "Agentic SOC." This approach leverages AI-powered agents within its Falcon platform to autonomously analyze, hunt, and respond to cyber threats, thereby automating complex workflows and enhancing the efficiency of security operations centers (SOCs). Among its latest innovations are the Malware Analysis Agent and the Hunt Agent, which streamline malware analysis and threat hunting processes by delivering actionable insights and recommendations. Additionally, the new Threat Intelligence Browser Extension for Google Chrome allows analysts to access adversary insights in real-time, directly within their workflow. These developments are part of CrowdStrike's broader strategy to address the evolving landscape of AI-powered cyber threats, ensuring that security teams can respond at machine speed and maintain an upper hand against increasingly sophisticated adversaries.

CrowdStrike has introduced a series of innovations in cybersecurity through the deployment of agentic AI, which enhances the efficiency and speed of security operations. This advancement includes the launch of seven new AI-driven agents that perform tasks at machine speed, aiding security teams by automating routine operations and allowing them to focus on strategic initiatives. These agents are designed to work within CrowdStrike's Falcon platform, integrating seamlessly with its existing threat hunting, exposure management, and next-gen SIEM technologies. A key component of this development is Charlotte AI, a platform that facilitates human-agent collaboration by enabling real-time interaction and integration with third-party partners. This initiative aims to democratize access to AI capabilities across all eligible CrowdStrike customers, marking a shift in the cybersecurity landscape by providing powerful tools to enhance defense mechanisms against increasingly AI-powered adversaries.

CrowdStrike has introduced the Agentic Security Platform, a significant update to its Falcon platform, designed to leverage and scale agentic AI for cybersecurity. This platform aims to address the evolving landscape where AI is both a critical tool for businesses and a weapon for adversaries. By integrating innovations like the Enterprise Graph, Charlotte AI AgentWorks, and the Agent Collaboration Framework, the platform provides a unified, real-time data layer that enhances the ability of security teams to deploy, customize, and manage AI agents effectively. The new Falcon console offers an AI-powered user experience, transforming complex data into actionable insights, thereby aiding in faster and more precise decision-making. This development signifies a shift towards agentic security, where AI-driven automation and intelligence are pivotal in defending against advanced threats, thereby positioning CrowdStrike as a leader in the AI era of cybersecurity.

CrowdStrike has announced its intent to acquire AI security leader Pangea to pioneer the category of AI Detection and Response (AIDR), enhancing its Falcon platform to deliver comprehensive security across the AI lifecycle. This acquisition aims to secure enterprise AI development and usage by integrating Pangea's capabilities in inspecting AI interactions, enforcing governance policies, and protecting against prompt injections and data leaks. As AI adoption accelerates, the partnership will provide businesses with the tools necessary to manage the expanding attack surface, offering deep visibility and control over AI applications and agents. The integration of Pangea's AI-native capabilities into the CrowdStrike Falcon platform is expected to deliver the industry’s first complete AIDR solution, addressing both AI usage and development security needs to ensure safe and compliant enterprise AI operations.

CrowdStrike has announced Falcon Complete Hub, a new feature within its Falcon Complete Next-Gen Managed Detection and Response (MDR) platform, designed to enhance security operations by providing a unified, actionable view of all MDR activities. This integration aims to address the challenges posed by modern eCrime threat actors, who are increasingly sophisticated and fast, by offering expert-backed insights and prioritized actions that accelerate threat response. The Falcon Complete Hub delivers enhanced visibility and control, streamlines response efficiency, and empowers security teams with strategic insights, while maintaining the same elite team and results that have established Falcon Complete as a leader in the industry. This development builds on CrowdStrike's reputation for innovation and leadership, as recognized by various industry reports, by giving customers greater transparency and control over their security operations.

The text provides an overview of CrowdStrike's recent cybersecurity developments and achievements as of September 2025, highlighting their efforts in addressing vulnerabilities and enhancing security measures across various platforms. Key initiatives include the introduction of Threat AI, an innovative threat intelligence system, and advancements in identity security with three new innovations. CrowdStrike's Falcon platform is noted for its role in preventing data leaks through unified data protection and stopping potential exploitation attempts via enhanced runtime capabilities. The September 2025 Patch Tuesday update from Microsoft is also detailed, addressing 84 vulnerabilities, including two zero-day and eight critical vulnerabilities. Additionally, the text emphasizes the importance of proactive cybersecurity strategies, recommending organizations plan for the discontinuation of Windows 10 support in October 2025, and underscores CrowdStrike's leadership in exposure management, as recognized by industry analyses.

The text provides an overview of CrowdStrike's recent achievements and innovations in cybersecurity, highlighting its recognition as a leader in The Forrester Wave™ for Managed Detection and Response (MDR) Services in Europe for Q3 2025. CrowdStrike received top scores in several criteria, including endpoint, identity, and cloud detection surfaces, showcasing its commitment to blending AI technology with expert human oversight to combat modern threats. The company emphasizes its focus on identity-centric security, comprehensive threat visibility, and the use of AI to enhance threat detection and response capabilities. CrowdStrike's Falcon Complete Next-Gen MDR service offers end-to-end threat protection by integrating endpoint, identity, and cloud telemetry, and it uses AI to improve the speed and accuracy of threat detection. The company is consistently recognized by industry analysts for its innovation and leadership in the cybersecurity domain, further solidifying its reputation as a trusted provider of advanced threat protection solutions.

EMBER2024 represents the latest update to the EMBER dataset, originally released in 2018, which plays a critical role in advancing machine learning-based malware detection within the cybersecurity industry. This enhanced dataset, developed by a team including CrowdStrike data scientists, encompasses metadata and calculated features for over 3.2 million files across six file formats, offering a comprehensive resource for training and evaluating machine learning models. The update includes a challenge set that features files initially undetected as malicious by antivirus products, highlighting the difficulties in classifying malware and providing a metric for future improvement. Additionally, the release includes infrastructure code for dataset construction, facilitating future research endeavors by enabling researchers to replicate or expand the dataset, thereby contributing to ongoing advancements in the field. EMBER2024 exemplifies CrowdStrike's dedication to research and collaboration, supporting innovation and strengthening defenses against cyber threats.

CrowdStrike's blog discusses the evolving cybersecurity landscape in the era of AI, emphasizing the need for comprehensive protection against the expanding attack surface created by AI's integration into enterprise systems. AI tools, models, and data pipelines now operate across diverse environments, increasing risks of exploitation by adversaries. The CrowdStrike Falcon® platform addresses these challenges by offering full-stack protection, real-time threat detection, and governance for AI operations, ensuring security across endpoints, clouds, and SaaS platforms. It includes features such as unified visibility, end-to-end lifecycle protection, and AI-powered defense, while also emphasizing the importance of proactive security measures to manage AI-related risks effectively. The platform's capabilities extend to safeguarding AI agents and applications, preventing data leaks, and providing comprehensive insights into AI infrastructure, ultimately helping enterprises secure their AI environments while maintaining operational efficiency.