CrowdStrike: Agentic AI Intrusions Triple in H2 2026
Global – October 24, 2026 -- Agentic intrusions tripled in the second half of 2026 compared with the first half, according to CrowdStrike data, as threat actors hand hacking decisions and command execution to AI agents.
CrowdStrike's report, published on Wednesday, documents four threat actors. Two used sophisticated AI harnesses, the software that connects a large language model to external resources. Two used simpler setups. The firm said the main constraint on scaling such campaigns is "token budgets," not engineering complexity.
Spanish- and English-speaking actor breaches at least 15 Argentine healthcare organizations
The actor used a penetration-testing harness built on the open-source PentestGPT framework, modified with extra hacking scripts. One Anthropic Claude Code agent acted as supervisor and assigned tasks to a second agent. CrowdStrike observed the activity between mid-May and mid-August.