Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks CrowdStrike Blog By: John Prieto 21 July 2026 at 07:00