TLDR Tech / InfoSec
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
The CrowdStrike 2026 Threat Hunting Report reveals that 88% of observed vulnerabilities were actively exploited within 48 hours of a public proof-of-concept release from January to June. Advanced threat groups, including VAULT PANDA and GENESIS PANDA, weaponized flaws in under 24 hours. UMBRAL BISON notably exploited the Linux privilege escalation vulnerability CVE-2026-31431 approximately 20 hours post-disclosure. The report also indicates a significant shift in attack vectors, with a fifteenfold increase in device code phishing and a high concentration of software registry threats targeting npm.
Read the full story