CROWDSTRIKE 2026 THREAT HUNTING REPORT: EXPLOITATION WINDOW CLOSES AS AI USE ACCELERATES

Summary from the TLDR InfoSec newsletter

CrowdStrike reports that 88% of observed vulnerabilities were actively exploited within 48 hours of a public proof-of-concept release between January and June. Advanced threat groups like VAULT PANDA and GENESIS PANDA weaponized flaws in under 24 hours, while UMBRAL BISON targeted Linux privilege escalation vulnerability CVE-2026-31431 roughly 20 hours after disclosure. The report also highlights a rapid shift in alternative attack vectors, noting a fifteenfold increase in device code phishing alongside a massive concentration of software registry threats targeting npm.