AI-enabled cyber threats drive demand for agent visibility

Nation-states, e-crime groups and hacktivists are leveraging open-weight models, CrowdStrike says. Models with their guardrails removed can be downloaded from Hugging Face, run on a powerful system and, when prompted, generate a malware or ransomware kit.

CrowdStrike characterizes the capability as an immediate security issue rather than a theoretical one. Customers want visibility into agents and tools to stop these threats, while determining whether an incident is a fully AI-driven attack or an adversary using AI assistance.

The company says that distinction informs both defensive measures and how an incident is communicated to executives and boards. CrowdStrike says its existing agent and platform can instrument agent actions, identities, tool calls, agent spawning, network connections and prompts.