New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever
2026-06-19T07:23:33Z•3faa7d73dc896d95f3e0f507c9797af1fd25daab7d6f335014e5c3a8a5027a30
AI securityChinaClickOnceExecutive Order 14409Falcon Exposure ManagementIDProJune 2026MicrosoftOpenIDPatch Tuesdaycloud/runtime securitycontinuous identityidentitysupply chainthreat landscapevulnerabilitieszero-day
What happened
CrowdStrike published a set of June 2026 blog posts covering: a two-part analysis of new abuse techniques leveraging Microsoft ClickOnce deployment; guidance on securing AI following Executive Order 14409 and announcements around continuous identity for AI agents; product updates including Falcon Exposure Management for third‑party environments; identity initiatives with OpenID and IDPro; their 2026 Technology Threat Landscape Report highlighting China‑linked activity; and the June 2026 Patch Tuesday analysis noting Microsoft patched 206 vulnerabilities, including three publicly disclosed zero
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- crowdstrike_blog
- Record identifier
- 3faa7d73dc896d95f3e0f507c9797af1fd25daab7d6f335014e5c3a8a5027a30
- Enrichment time
- 2026-06-19T07:23:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.