CrowdStrike Uncovers New Agentic AI Campaigns

CrowdStrike’s Counter Adversary Operations team reports that four previously unidentified threat actors exposed AI-assisted offensive frameworks through open directories, offering insight into the growing use of agentic AI in cyber intrusions between May and August 2026. The actors, operating in Spanish/English, Chinese, Indonesian, and Russian, targeted healthcare, government, SaaS, data-center, and private-sector organizations across several countries, using Claude Code and customized or open-source penetration-testing frameworks to automate reconnaissance, exploitation, command execution, and data exfiltration. Their technical sophistication varied from multi-agent systems with specialized supervisor and executor roles to simple collections of public skills requiring frequent human intervention, yet even less-skilled operators reportedly compromised multiple targets. CrowdStrike assesses that agentic AI is reducing barriers to effective cyber operations, enabling attacks to proceed at machine speed and potentially increasing both the volume and sophistication of intrusions as models and offensive frameworks improve.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.