New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever
2026-06-22T07:23:33Z•4efd6335b93b80715a0f5958a3cb16650a00f1fd147473e18c7056334ceb0f44
ai agentsai securitychinaclickonceclickonce abusecontinuous identityexecutive order 14409falcon exposure managementidentitymalwaremicrosoft patch tuesdaysoftware deploymentthird-party riskthreat landscapevulnerabilitieszero-day
What happened
RSS feed of CrowdStrike blog posts (June 9–18, 2026) covering: a two-part series on new abuse of Microsoft ClickOnce application deployment; June 2026 Patch Tuesday analysis (206 vulnerabilities including three publicly disclosed zero-days); guidance and product news on AI security (response to Executive Order 14409) and continuous identity for AI agents; Falcon Exposure Management now available for third‑party environments; identity leadership and runtime/cloud security positioning; and the 2026 Technology Threat Landscape Report highlighting China‑focused attack activity. Key operational tak
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- crowdstrike_blog
- Record identifier
- 4efd6335b93b80715a0f5958a3cb16650a00f1fd147473e18c7056334ceb0f44
- Enrichment time
- 2026-06-22T07:23:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.