CrowdStrike’s annual Threat Hunting Report, released August 3, 2026, delivers a blunt verdict: AI-enabled attacks rose 89% over the past year, and AI systems themselves have become one of the most actively targeted parts of the modern enterprise. The report is based on frontline intelligence from CrowdStrike’s own threat hunters tracking more than 290 named adversary groups.
Quick facts
- AI-enabled adversary activity increased 89% year-over-year, according to CrowdStrike’s 2026 Threat Hunting Report.
- One LLM-jacking campaign generated nearly 200,000 AI model requests in two minutes, per CrowdStrike’s telemetry.
- During the first half of 2026, 87% of identified software registry threats involved malicious npm packages; North Korea-linked STARDUST CHOLLIMA injected a malicious package into 131 trusted Mastra AI framework dependencies.
- 88% of exploitation involving a public proof-of-concept occurred within 48 hours of release; China-linked actors moved even faster, launching attacks within 24 hours in some cases.
- Cloud-conscious eCrime activity, including credential theft, cryptomining, and LLM abuse, surged 171%.
AI as weapon, and as target
Per CrowdStrike’s official release, attackers are using AI throughout the entire attack chain, generating payloads and shell commands, exploiting AI infrastructure directly, and abusing enterprise LLM deployments. CrowdStrike counter adversary operations SVP Adam Meyers told reporters plainly that AI is now both the weapon and the target, a high-value attack surface that more threat actors are actively going after as enterprises roll it out everywhere. The firm also found that AI agent-triggered detection leads are growing at 2.5 times the rate of human-triggered ones, a sign of how much faster both attack and defense are moving.
The AI supply chain is the new soft target
The npm findings are the report’s most concrete illustration of where attackers are actually focusing. According to CrowdStrike’s detailed writeup, the North Korea-linked group STARDUST CHOLLIMA used stolen maintainer credentials in March 2026 to compromise the Axios npm package and deliver custom malware, then in June injected a malicious package as a dependency into at least 131 trusted Mastra AI framework packages specifically. Separately, the eCrime actor ALTERED SPIDER compromised more than 300 software dependencies in a single day to harvest credentials and pivot into cloud environments. Trusted, widely-used AI development building blocks are becoming exactly the kind of high-leverage target that a single compromise can multiply across thousands of downstream projects.
Exploitation windows are collapsing to hours
The report’s timing data is arguably the most operationally urgent finding for defenders: 88% of exploitation involving a public proof-of-concept happened within 48 hours of release in the first half of 2026, with China-nexus groups VAULT PANDA and GENESIS PANDA specifically launching deliberate attacks within 24 hours of disclosure. That’s a dramatically shorter window than the patch cycles most enterprise security teams are built around, and CrowdStrike ties the acceleration directly to AI-assisted vulnerability research and exploit development on the attacker side.
Why this matters beyond one vendor’s marketing report
It’s worth noting CrowdStrike sells security products, and an alarming threat report also serves the company’s commercial interest. That said, the specific findings here, particularly the npm supply-chain compromises and the compressed exploitation timelines, are consistent with what independent researchers and other vendors have reported throughout 2026, including the AI containment failures disclosed separately by OpenAI and Anthropic this summer. Taken together, the pattern across multiple independent sources points the same direction: AI is compressing both attacker and defender timelines simultaneously, and most enterprise security processes haven’t caught up to operating at that speed yet.
Key takeaway
If your organization uses any AI development framework or package sourced from npm or a similar public registry, the concrete action item from this report is auditing your dependency chain specifically for AI-related packages, not just your general software supply chain, since that’s precisely where nation-state actors have already demonstrated they’re focusing.
