CrowdStrike Adds Cloud Security Tools to Protect AI Infrastructure
CrowdStrike has introduced generally available Falcon Cloud Security innovations designed to protect software supply chains, AI workloads and cloud infrastructure from build to runtime. The company says the updates combine proactive security with real-time cloud detection and response on the Falcon platform.
- CrowdStrike says the Falcon Cloud Security innovations are now generally available.
- The offering tracks 290+ adversaries to inform cloud detections and risk prioritization.
- Supply Chain Security for Cloud extends malicious-package detection into container images.
- CrowdStrike observed ALTERED SPIDER compromise more than 300 software dependencies in a single day.
- The updates connect proactive security with real-time cloud detection and response.
Security for a faster-moving cloud environment
CrowdStrike says AI is accelerating both software development and cyberattacks. Developers and coding agents are writing more code, bringing in more open source packages and launching more cloud and AI workloads than security teams can review manually.
At the same time, adversaries are using AI to move faster and targeting the components organizations build and operate. Those targets include packages in automated pipelines, identities that control cloud resources and infrastructure supporting AI applications.
Falcon Cloud Security is powered by adversary intelligence tracking 290+ adversaries, according to CrowdStrike. The company says this helps its detections and risk prioritization reflect how attackers operate in the cloud.
Connecting exposure management with cloud response
The service runs on the CrowdStrike Falcon platform, which connects endpoint and identity protection with security operations. CrowdStrike says this extends protection from developer endpoints and software supply chains to cloud workloads.
The company is also linking proactive security with real-time cloud detection and response. Exposure and attack path information gathered before an attack can provide context for analysts responding to one, CrowdStrike says.
This approach is intended to help teams identify where they are exposed, determine whether software entering production can be trusted and act on risks before deployment. CrowdStrike says the latest innovations are all now generally available.
Focus on compromised software and AI workloads
CrowdStrike highlights software supply chain threats as a key concern. AI coding agents can pull open source packages into automated builds faster than teams can review them, creating opportunities for attackers to compromise software that appears legitimate.
CrowdStrike says it observed ALTERED SPIDER compromise more than 300 software dependencies in a single day. The company also warns that a compromised dependency does not need a CVE to be dangerous, so vulnerability scanning alone may miss the threat.
Supply Chain Security for Cloud extends the adversary intelligence CrowdStrike uses to detect and quarantine malicious packages on endpoints into container images. The broader Falcon Cloud Security offering is positioned to protect the cloud environments and infrastructure that AI applications rely on, while helping detect cloud attacks in seconds, according to the company.
What the update means for security teams
The announcement reflects CrowdStrike's effort to connect prevention, software supply chain protection and runtime response in one platform. For organizations building and operating AI workloads, the company says this can provide a shared view of risk from developer endpoints and code dependencies through cloud infrastructure.
The updates are aimed at security teams that need to keep pace with faster development and adversaries that are also using AI. CrowdStrike's stated goal is to help them stop compromised software before production, protect AI workloads and respond to cloud attacks using context gathered earlier in the attack lifecycle.
CrowdStrike: New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
