# Threat Actors Automate Cyber Intrusions

CrowdStrike research identified four previously unreported threat-actor groups using AI agents to automate cyber intrusions against healthcare, government, and enterprise targets. The report identifies no specific solicitation, contract, budget, or procurement contact, but highlights a capability gap relevant to agencies and contractors: protecting endpoint, identity, and cloud environments against faster, automated attacks.

- Organizations may benefit from assessing whether existing security capabilities provide real-time visibility across endpoints, identities, and cloud environments, alongside AI-enabled detection and response.
- Procurement teams can use the findings to inform evaluations of cybersecurity tools and service requirements, particularly coverage for automated intrusion activity and rapid response.
- The report signals potential demand for these capabilities, but does not identify a funded procurement opportunity or a specific purchasing timeline.

**Jurisdictions:** international
**Industries:** Information Technology, Healthcare
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** November 04, 2026

### Vendors
- CrowdStrike ()
- Anthropic ()
- DeepSeek ()

### Key Quotes
> CISOs need real-time visibility across endpoints, identities, and cloud environments, combined with AI-powered detection and response capabilities that can disrupt adversaries at machine speed.
> — Adam Meyers, Head of counter-adversary operations at CrowdStrike

### Sources
- [Report: New research uncovers 4 threat actors using AI agents in cyber attacks - Cyber Daily](https://www.cyberdaily.au/security/14395-report-new-research-uncovers-four-threat-actors-using-ai-agents-in-cyberattacks-2) - Cyber Daily