Crowdstrike outage

Tracking the historical global IT outage caused by a cybersecurity provider through carefully selected relevant articles.

To our customers and partners (Crowdstrike)

Technical details about how a content detection improvement caused the biggest global IT outage (Crowdstrike)

Channel File 291 controls how Falcon evaluates named pipe1 execution on Windows systems. Named pipes are used for normal, interprocess or intersystem communication in Windows.

The update that occurred at 04:09 UTC was designed to target newly observed, malicious named pipes being used by common C2 frameworks in cyberattacks. The configuration update triggered a logic error that resulted in an operating system crash. 

Taviso with some thoughts about someone pointing out the issue was caused due to a NULL pointer. (Tavis Ormandy)

Tech disruptions sparked by software update highlight the fragility of globally connected techhnology (AP)

What I learned from the Microsoft Global IT Outage (Kevin Beaumont)

Technical details in 6 tweets and the reason Windows could not recover itself (Sergio de Los Santos)

Recent job advertisment for Crowdstrike (Linkedin - 22 July, 2024).

Windows Security best practices for integrating and managing security tools

The 2024 Crowdstrike Incident - Simply Explained

External Root Cause Analysis (RCA) by Crowdstrike