Windows PCs crashing worldwide due to CrowdStrike issue
Windows PCs crashing worldwide due to CrowdStrike issue
This is why you do staged rollouts of updates... not the entire planet at once.
147And don't have automatic updates enabled for critical infrastructure.
70I don't know exactly how crowd strike works, but this sounded like a "virus signatures" update (IE not a software update per se). And thats what caused the issue.
I think "real time virus protection" is why people use it so they expect the signatures to get updated asap/with little to no human intervention.
This is a crowd strike epic fail...for how they let their software blue screen systems with a virus signature update.
13
Can someone in non marketing terms explain what the fuck CrowdStrike Falcon Sensor is? I literally never heard of this company or product before.
95It's basically corporate anti-virus software. Intended to detect and prevent malware.
111It checks for malicious falcons in your system's level 4 aviary cache.
68
17Ha ha! Well done!
2
It's software put on every machine so that the company can quickly isolate it if/when something bad happens (or it falls out of security compliance). To do this is requires a constant Internet connection, insanely high privileges on the machine and frequent updates to be appraised of risks.
That risk update went off the rails and into the next state.
4
I work in QA on the night shift at a video game company. It was absolute chaos at work tonight lmao we only had a grand total of 6 working PCs between all of us
64Company spyware. We have that on our devices. They used to have an “about” stored locally on the app, but removed it and a web connection is required to view the docs. Basically says it downloads/sees everything on your device and checks for threats. Thing is a few people have been fired for having things in their devices they shouldn’t. I didn’t ask what it was, nor did I hear how these things were “threats”, but nonetheless they were fired. Too many people treat company hardware like “free device, bro!” and put all sorts of personal stuff on the device. Most industries it’s probably not too big of a deal, but for mine if there’s an incident that happens when you were busy watching Netflix or something instead of doing your job you’re fucked. First thing they’ll do is check your device and crowdstrike to see what you were doing, and even if you weren't watching Netflix all your personal data will be exposed.
52They definitely could, but most cybersecurity departments are paid too much to worry about minor items like that. If HR tells us to look into a specific user and gets the proper approvals so that everything is in compliance, we'll definitely get someone on the team to do it, but otherwise if we happen to see evidence of unapproved usage, we're mostly going to overlook it unless it could lead to something dangerous to your machine or the company as a whole.
EDRs like Crowdstrike can see very very nearly everything you do though, definitely everything you would care about.
20
Yikes. I feel sorry for all the help desk and support staff that has to deal with this chaotic mess all day.
49What a striking name... CrowdStrike heh. They definitely live up to it!
34More like CrashStrike
3
This is going to turn out it was a hack in several months right?
31Won't take that long, security researchers are already decompiling the update to see if it was malicious or incompetence.
53You won't find the incompetence in the software no matter what.
If you fail to assume that the software contains issues -- if you fail to understand that your software is made by humans and humans make mistakes, not because they're bad but because they're human -- and if you fail to implement mechanisms to feel gracefully with inevitable failures, THAT is the incompetence.
Failures are systemic.
-19
Hacks of this grade tend to be targeted, this is most likely incompetence.
50Think big. This may have had a target. But hitting the target only wasn't possible so everyone got hit.
It's possible those responsible only had this weapon that was capable of hitting the target, maybe the plan was to disrupt world flights to make someone late tomorrow, who knows. Maybe poo-tin or Xi-the-Pooh wanted to hit America and its allies?
0
Never attribute to maliciousness that which can be explained by incompetence.
That said, I'm sure the Crowdstrike CEO is currently on a phone call with three of their pet Congresscritters asking if they can get a $100M grant to harden their systems against Russia/China/NKorea/Antifa interference right now.
15I'll just quietly leave this here: https://www.crowdstrike.com/blog/crowdstrike-google-cloud-expand-strategic-partnership/
15
Ca-caw!
13Looking forward to the Kevin Fang video in a few years.
5Crowd Strike's Final Fantasy
3Crowstrike Onstrike
2That’s a shame.
0So cool
-2