CrowdStrike
CompanyFacts
- Country
- United StatesSource: Wikidata
- Founded
- 2011Source: Wikidata
- Sector
- Computer securitySource: Wikidata
- Official website
- www.crowdstrike.comSource: Wikidata
Security timeline
- Activity reported by The Hacker NewsChinese state-linked group Vapor Panda uses AI-powered ARTEX framework against high-value targets
- Zero-day reported by watchTowr LabsCISA adds VMware ESX CVE-2026-41709 and Linux Fragnesia to KEV; China-linked Warp Panda exploited ESX flaw
Recent news
2026 rankings of MSSP, incident response, managed SIEM and SOCaaS providers
Four Cyber Security News listicles rank providers of managed security services (MSSP), incident response retainers, managed SIEM and SOC-as-a-Service for 2026. Scores are editorial, weighted on detection quality, transparency, SLA strength and commercial flexibility, and are explicitly not lab results. The articles flag acquisition and roadmap uncertainty at Secureworks (Sophos integration), the Cylance and LogRhythm/Exabeam lineages, and advise checking contract terms before buying.
China-backed group used agentic AI tool ARTEX to compromise about 140 targets in 11 days
CrowdStrike tracks the China state-backed group Vapor Panda, which is using ARTEX, an automated agentic AI penetration testing framework, paired with DeepSeek. The campaign has targeted more than 200 organisations in at least 14 countries since 17 October, with about 70% of targets confirmed or likely compromised, and it remains active. CrowdStrike says organisations need visibility into endpoints, identities and cross-domain capabilities to respond.
Chinese state-linked group Vapor Panda uses AI-powered ARTEX framework against high-value targets
CrowdStrike attributes use of ARTEX, a Go-based AI-powered penetration testing framework, to a China-based targeted intrusion adversary it tracks as Vapor Panda, previously VexatiousTemper. The headline refers to more than 200 organisations worldwide, but the supplied text is truncated and gives no detail on victims, sectors or techniques. The activity is described as aimed at high-value targets simultaneously.
CISA adds VMware ESX CVE-2026-41709 and Linux Fragnesia to KEV; China-linked Warp Panda exploited ESX flaw
CISA added VMware ESX CVE-2026-41709 (insufficient logging, CVSS 7.6) and Linux kernel CVE-2026-46300 (Fragnesia) to its KEV catalogue. CrowdStrike reports that Warp Panda exploited the ESX flaw as a zero-day in early 2026 to reduce audit log visibility. The Cyber Centre also flagged exploitation of a Siemens Software Center DLL sideloading flaw and Gitea vulnerabilities, and urged administrators to apply updates.