multi-cloud Archives - MASSIVE News

What’s New in Falcon Cloud Security: Expanding Multi-Cloud Coverage

wiredgorilla — Tue, 30 Jun 2026 10:00:13 +0000

Identities, permissions, exposed resources, and sensitive data can all contribute to risk regardless of whether they reside in AWS, Microsoft Azure, or Google Cloud. However, security teams often encounter uneven visibility and coverage across disparate cloud environments, and face difficulty in consistently understanding risk across a multi-cloud estate.

This month’s CrowdStrike Falcon® Cloud Security innovations expand its capabilities in real-time cloud security posture management (CSPM), the Cloud Risks feature, data security posture management (DSPM), and cloud infrastructure entitlement management (CIEM) across Azure and Google Cloud. With these expansions, key security workflows are now available across AWS, Azure, and Google Cloud.

Real-Time CSPM for Google Cloud

Security teams rely on CSPM to identify misconfigurations and internet exposures before they can be exploited. However, traditional CSPM approaches often rely on periodic snapshot scanning, which creates a delay between when a risk is introduced and when it becomes visible to defenders. During this window, newly created resources, permission changes, and misconfigurations may go unnoticed.

CrowdStrike introduced real-time CSPM for AWS and Azure to enable security teams to identify cloud changes and misconfigurations within minutes. We’re now extending those capabilities to Google Cloud.

Across Google Cloud environments, Falcon Cloud Security provides near real-time visibility into new assets, asset updates, misconfigurations, and cloud risks that emerge from combinations of cloud exposures. This helps teams identify potential breach paths shortly after they are introduced.

By surfacing findings as they happen, security teams can investigate and remediate cloud risks sooner using a consistent workflow across AWS, Azure, and Google Cloud.

The post What’s New in Falcon Cloud Security: Expanding Multi-Cloud Coverage appeared first on MASSIVE News.

CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security

wiredgorilla — Fri, 12 Jun 2026 18:00:07 +0000

As adversaries accelerate, CDR has become the defining capability of a cloud security strategy — the cloud equivalent of what EDR brought to endpoint protection. Identifying risk is no longer enough; organizations must be able to quickly act on it to stop today’s adversaries. This is where CrowdStrike leads.

Setting the Standard for Cloud Detection and Response

What sets CrowdStrike’s CDR apart is the intelligence behind it. Detection logic is informed by CrowdStrike’s threat intelligence team, which tracks more than 280 named threat groups, including cloud-focused threat actors. This helps ensure detections continuously evolve alongside attacker behavior rather than relying on static, predefined patterns.

As Frost & Sullivan notes, CrowdStrike “has moved beyond batch processing of logs into a streaming CDR architecture that ingests cloud control‑plane and workload telemetry as it is generated, applying a new real‑time detection engine, streaming analytics and adversary‑informed IOAs to detect malicious activity in seconds and orchestrates automated cloud‑native response actions via Falcon Fusion SOAR, which enables significant reduction in detection and response latency compared to snapshot‑based CNAPP engines.”

Underpinning this is CrowdStrike’s ability to correlate telemetry across cloud infrastructure, workloads, identities, applications, data, and AI services, which gives security teams unified context for prevention, detection, investigation, and response across multi-cloud and hybrid environments. Security teams still relying on snapshot-based CNAPP engines risk missing active attacks as they unfold, which creates blind spots during the most critical moments of an incident.

From Cloud Detection to SOC Response

Detection depth alone isn’t enough. The harder problem is connecting cloud security findings to the SOC workflows and response processes that security teams rely on every day.

As Frost & Sullivan highlights, CrowdStrike “connects cloud activity, workload telemetry, identity context, and threat intelligence into a SOC-consumable detection and response workflow. By integrating CDR with Falcon XDR, NG-SIEM, Falcon Fusion SOAR, Falcon Complete Next-Gen MDR, OverWatch, and Unified Cases, CrowdStrike extends cloud runtime security into the broader security operations environment, enabling faster cloud threat detection, investigation, prioritization, and remediation within existing SOC workflows, not through the management of separate cloud security operations, which is seen as a major differentiator of FCS.”

CrowdStrike Falcon® Complete managed detection and response (MDR) and CrowdStrike Falcon® Adversary OverWatch™ further extend this with elite managed detection and 24/7 human-led threat hunting.

The Cloud Security Platform Enterprises Consolidate On and Grow With

Frost & Sullivan recognizes CrowdStrike as “one of the fastest-growing vendors in the cloud security market,” a position backed by cloud security ARR surpassing $800 million USD and growing more than 35% year-over-year. That growth is driven in part by CrowdStrike’s single-sensor architecture. The same lightweight Falcon sensor that protects endpoints extends seamlessly to cloud workloads and containers, creating a natural consolidation path without additional sensors or separate infrastructure.

CrowdStrike® Charlotte AI™, trained on millions of real-world SOC decisions from the Falcon Complete MDR team, brings AI-powered triage, investigation, and response automation to cloud security today, reducing analyst burden and helping teams scale without proportional headcount growth. Looking ahead, CrowdStrike’s agentic SOC roadmap reflects a continued focus on improving response speed and helping teams operationalize cloud runtime security as their needs evolve.

What’s Next for Falcon Cloud Security

As Frost & Sullivan notes, CrowdStrike is “expected to further strengthen its innovation around runtime security, CDR, and SOC integration” with a roadmap spanning expanded Kubernetes detections, unified cloud detections, and broader AI workload security.

CrowdStrike remains committed to evolving Falcon Cloud Security as the platform that connects cloud risk, workload behavior, identity, and SOC workflows into a single operational fabric. In a world where adversaries move in seconds, detection and response must too.

Read the full report: Download the full report to learn why CrowdStrike was named a Leader in the 2026 Frost Radar: Cloud and Application Runtime Security and what it means for organizations’ cloud security strategies.

Additional Resources

The post CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security appeared first on MASSIVE News.

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

wiredgorilla — Sat, 09 May 2026 17:00:09 +0000

Complexity has become a defining security challenge as organizations expand across hybrid and multi-cloud environments. In fact, 52% of surveyed organizations ranked multi/hybrid cloud complexity among their top three infrastructure concerns.¹ This complexity creates fragmented visibility across cloud providers, workloads, and Kubernetes environments — gaps that adversaries increasingly exploit to move undetected.

Cloud-conscious intrusions rose 37% year-over-year in 2025, the CrowdStrike 2026 Global Threat Report found. Emerging eCrime adversaries are advancing their tactics to abuse trusted relationships and compromise downstream victims. Adversaries are also accelerating — the fastest observed eCrime breakout time was just 27 seconds — leaving little room for delayed detection and response.

Yet with the tooling available today, this remains difficult in practice. Three key gaps persist:

Fragmented runtime visibility: Limited or siloed visibility across multi-cloud environments slows investigation and obscures attacker activity.
Delayed detection and response: Reliance on log post-processing introduces lag, giving adversaries time to move laterally and establish persistence.
Kubernetes control plane blind spots: Limited visibility into the Kubernetes API layer allows attackers to abuse legitimate actions to escalate privileges and modify configurations without triggering traditional defenses.

Closing these gaps requires a cloud-native application protection platform (CNAPP) approach that extends beyond posture management to deliver real-time, unified detection and response across cloud environments.

Today, we’re introducing expanded real-time cloud detection and response (CDR) support for Google Cloud, along with new Kubernetes threat detections for Google Kubernetes Engine (GKE). These innovations are designed to close critical visibility gaps and enable faster detection and response to modern cloud threats.

We’re also extending the CrowdStrike Falcon® platform to regional Google Cloud infrastructure, enabling organizations to adopt and consolidate on the industry’s leading AI-native cybersecurity platform using the underlying cloud provider that best aligns to their operational and data sovereignty requirements.

With these new innovations, CrowdStrike continues to advance its mission of helping organizations stop cloud breaches across hybrid and multi-cloud environments.

Real-Time CDR for Google Cloud: Expanding Detection and Response Across Multi-Cloud Environments

CrowdStrike Falcon® Cloud Security now extends real-time CDR to Google Cloud, in addition to support for AWS, delivering unified, real-time detection and response across multi-cloud environments. By bringing Google Cloud activity into a single detection pipeline, security teams gain visibility into attacker behavior across their multi-cloud attack surface and eliminate the gaps of fragmented visibility that adversaries leverage.

Many approaches to processing agentless cloud telemetry introduce delays in detection. Falcon Cloud Security analyzes Google Cloud activity as it happens and instantly applies detections. This enables SOC teams to identify malicious cloud activity in seconds and interrupt attacker activity before it can progress, reducing dwell time and limiting potential blast radius.

CrowdStrike powers CDR with the breadth of the broader Falcon platform, in which teams can correlate cloud telemetry with sensor activity and threat intelligence, and accelerate with CrowdStrike® Charlotte AI™ for deeper threat hunting and faster investigations.

With multi-cloud support, CrowdStrike continues to lead as the only CNAPP delivering real-time, cross-cloud detection and response designed to stop breaches.

Watch it in action in this demo:

This new capability is in beta and will be generally available in the coming months.

Kubernetes Threat Detection: Exposing Attacker Activity in the Control Plane

As organizations increasingly rely on Kubernetes to run mission-critical and AI-driven applications, visibility into the control plane has become essential to stopping modern attacks. Without it, adversaries can operate through legitimate orchestration workflows and bypass traditional runtime defenses to remain undetected.

Falcon Cloud Security now extends detection coverage into the Kubernetes control plane to provide visibility into attacker activity within the orchestration layer that manages and deploys workloads. While the Falcon sensor protects the runtime environment, Kubernetes threat detection enhances coverage by ingesting and monitoring Kubernetes audit logs to expose how adversaries exploit resources — such as service accounts or secrets — to gain access, escalate privileges, and maintain persistence beyond the workload.

Each detection is enriched with cloud, workload, and identity context and correlated across the Falcon platform so security teams can trace attacker activity across Kubernetes and the broader cloud environment. This allows teams to connect control plane actions with runtime behavior and identity activity, and gain a unified view of how attacks unfold across domains.

By extending detection into the control plane, Falcon Cloud Security provides comprehensive Kubernetes protection that helps organizations detect and stop attacks that would otherwise remain hidden.

The post CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud appeared first on MASSIVE News.