CrowdStrike 2026 Global Threat Report

by

Acrobat CrowdStrike 2026 Global Threat Report
Organizational Author: CrowdStrike
Source: https://www.crowdstrike.com

YEAR OF THE EVASIVE ADVERSARY

The world is operating in the agentic era. Artificial intelligence is embedded across the modern enterprise. Agents write code, analyze data, orchestrate workflows, and make decisions at machine speed. Every layer of the enterprise is becoming faster and more automated.

The adversary is operating in the agentic era as well. In 2025, AI-enabled adversaries increased attacks by 89% year-over-year. AI accelerated phishing and automated reconnaissance, shortening the time from initial access to impact. It elevated less sophisticated threat actors and amplified the most advanced ones. It compressed the time between intent and execution.

AI has also introduced a new dimension of risk: adversaries targeting the very AI systems Read More

The “Security by” Model Approach — Part 2: Meet the Cousins

by

If you thought “Security by Obscurity”, “Security by Isolation”, and “Security by Default” were the only models crashing the cybersecurity party… think again.

Turns out, the “Security by” (first uncovered in Part 1 of this series) family tree has a few more colorful cousins, the kind that only show up late to the party, wearing niche distro hoodies and carrying encrypted USB drives. They may not be household names like SaaS or PaaS (and they certainly don’t rhyme), but trust me, they bring their own brand of weird… and sometimes wonderful security vibes.

These models don’t always follow industry buzzwords. They aren’t trending on Hacker News. But behind the scenes, they’ve helped protect sensitive systems, dodge mass attacks, and keep threats guessing. They’re the oddballs, the security underdogs but don’t mistake them for weak links.

So, grab your cyber-coffee, log out of root, update your threat model… and let’s meet the next batch of “Security by” models.

Read more

CryptoLocker Was Just the Beginning

by

Back in 2013, CryptoLocker was terrifying enough. It didn’t sneak in to steal your passwords or spy on your browsing habits, no!, it marched straight in, slammed the door behind it, encrypted everything in sight, and flashed a blinking red ransom note demanding Bitcoin like a digital hostage negotiator with a countdown clock. It was bold, it was brutal, and it was the first time many people realized: your files could be locked up and leveraged against you with no Hollywood-style hacker, just a suspicious ZIP file in your inbox.

CryptoLocker didn’t need a flashy exploit or deep system knowledge. It weaponized trust disguised as invoices, delivery slips, or bank statements and lured users into opening attachments that detonated silently in the background. Once triggered, it encrypted documents, photos, spreadsheets, and anything else it could get its hands on, and then calmly asked for payment in Bitcoin, which, at the time, still sounded like something from a hacker movie.

But that was then, the opening act. What followed after my first article, was a decade-long escalation that turned ransomware from a nuisance

Read more