CrowdStrike finds hackers used AI coding agents to break into government and healthcare systems with little human help

CrowdStrike says four previously unreported threat actors used AI agents to run intrusions between May and August 2026, with fewer human instructions. One operator used Claude Code with 819 skills taken from public GitHub repositories to compromise government domains in Indonesia and Bangladesh. In Argentina, an attacker compromised at least 15 healthcare organizations. In one case the AI extracted five password hashes in about 20 minutes.

• Turn on two-factor login and keep every system patched, because automated attackers go for the easiest unlocked door first.
• Ask your IT provider whether they monitor for unusual logins and lateral movement, not just whether the firewall is on.

Source: CRN Asia. This is our short summary of their reporting. The paragraphs marked "Our read" and the things to do are SeedFoundry's opinion. The summary is drafted with AI tools. Image: CrowdStrike, from its own announcement. How we source and credit