CrowdStrike adds cloud tools that stop bad software packages

CrowdStrike made new features of its Falcon Cloud Security tool available to all customers. The tool covers cloud systems, which are the computers and services that companies rent to operate software. The features stop bad software packages before release and add attack alerts for Microsoft Azure and Kubernetes. They also include AI workloads. CrowdStrike gave no test results.

How it works

Supply Chain Security for Cloud finds bad npm and PyPI packages. These are code parts that many teams use. It finds them when teams make software. It examines the images again when a new threat is known. It also finds the containers in use that hold them. At deployment, a check point can tell or stop on a bad image.

The numbers

CrowdStrike tells that ALTERED SPIDER, an attacker group, compromised more than 300 software dependencies in one day. It tells that a check for known vulnerabilities can miss such a package. It also tells that it detects cloud attacks in seconds, but it gave no test results.

What is not known

The source gives no price, no customer numbers and no test of the new model. The model learns the usual condition of each customer. All claims come from CrowdStrike.

Insight: One vendor sells the agents and the brakes

On 4 November CrowdStrike launched AI agents that work with no person. On 3 November, it added a kill switch that cuts off agent access to AI models. This reads as one plan: sell the agents, the brakes and the cloud checks on one platform. Gartner forecasts 150,000 agents at one large company by 2028. Find out if you can mix vendors.