BSODs hit thousands of Windows PCs due to “a defect” in an update from CrowdStrike, taking banks, airlines, and more businesses offline; Microsoft is aware

Thousands of Windows machines are experiencing a Blue Screen of Death (BSOD) issue at boot today, impacting banks …

The Verge 2024-07-19 Tom Warren

Discussion

@anildash Anil Dash on threads
For folks who aren't familiar: Windows computers around the world are crashing because companies have installed a tool (made by a company called Crowdstrike) that helps them manage those machines for issues like security, and that software is causing an issue. …
@tomwarrenuk Tom Warren on threads
this Windows BSOD / CrowdStrike issue has knocked Sky News offline in the UK and Ryanair is already warning of flight delays. It's going to be a long day for IT admins worldwide https://www.theverge.com/...
@camwilson@mastodon.social @camwilson@mastodon.social on mastodon
Now confirmed as a Crowdstrike error, two complicating factors for organisations fixing it: — it's a hard problem to fix remotely with some devices are stuck in boot loops — reports of companies uninstalling Crowdstrike to fix — leaving them exposed to the threats
@camwilson@mastodon.social @camwilson@mastodon.social on mastodon
(still unconfirmed but, if true, it's a bit funny that CrowdStrike crashed computers worldwide minutes after the official nomination acceptance by Trump, who was obsessed with the company of a baseless conspiracy theory that it made up proof of Russian election interference)
@gbraad@mastodon.social Gerard Braad on mastodon
CrowdStrike on Windows (BSOD) workaround steps: — Boot Windows into Safe Mode or the Windows Recovery Environment — Navigate to the C:\Windows\System32\drivers\CrowdStrike directory — Locate the file matching “C-00000291*.sys”, and delete it. — Boot the host normally. …
@JoeUchill@mastodon.social Joe Uchill on mastodon
The worst part of Crowdstrike has to be that I wanted to come up with another “struck” song as a follow up to this toot and accidentally googled “struck dongs” — Truly, I am the real victim. — https://mastodon.social/...
@faanews @faanews on x
The FAA is closely monitoring a technical issue impacting IT systems at U.S. airlines. Several airlines have requested FAA assistance with ground stops until the issue is resolved. Monitor https://www.fly.faa.gov/ for updates.
@davidgrayrhodes David Rhodes on x
.@SkyNews have not been able to broadcast live TV this morning, currently telling viewers that we apologise for the interruption. Much of our news report is still available online, and we are working hard to restore all services.
@troyhunt Troy Hunt on x
Something super weird happening right now: just been called by several totally different media outlets in the last few minutes, all with Windows machines suddenly BSoD'ing (Blue Screen of Death). Anyone else seen this? Seems to be entering recovery mode: [image]
@brody_n77 Brody on x
@_JohnHammond There is a faulty channel file, so not quite an update. There is a workaround... 1. Boot Windows into Safe Mode or WRE. 2. Go to C:\Windows\System32\drivers\CrowdStrike 3. Locate and delete file matching “C-00000291*.sys” 4. Boot normally. 1/2
@akothari Akshay Kothari on x
The Microsoft / CrowdStrike outage has taken down most airports in India. I got my first hand-written boarding pass today 😅 [image]
@malwarejake Jake Williams on x
Okay, I'm just going to throw this out there, but maybe - just maybe - a vendor having the ability to change every one of their kernel drivers in the field at the same time without any approval from IT/end users is a model we need to reconsider... @CrowdStrike. [image]
@azuresupport @azuresupport on x
🛠️ We experienced a Storage incident in Central US which had downstream impact to a number of Azure services. This is currently mitigated, however we are still in the process of validating recovery to a small percentage of those downstream services. This was communicated to
@mike_d_ok @mike_d_ok on x
Crowdstrike fix. May the force be with you. Always. [image]
@thegrugq Thaddeus E. Grugq on x
Today's CrowdStrike outage must be the most comprehensive blocking of APT activity in the company's history.
@vxunderground @vxunderground on x
Threat Actors today wondering where the hell all their compromised hosts went [image]
@nicoleperlroth Nicole Perlroth on x
Oh boy. Not a cyberattack but one of those days when a software update had the same affect. https://www.nytimes.com/...
@divestech Dan Ives on x
This is clearly a major black eye for CrowdStrike and the stock will be under pressure after this global outage related to Microsoft has caused massive disruption globally. This is a technical update and importantly not a hack/cyber security threat.
@piratesoftware @piratesoftware on x
Technically CrowdStrike is doing it's job. Your data is still secure. Even from you.
@anothercohen Alex Cohen on x
I was fired from Crowdstrike today. I was hired a few weeks ago to run our infrastructure and reliability team. I had to get to the airport to start my 3 month summer vacation in France so I rushed our review process and deployed an update directly to production. Apparently
@flightradar24 @flightradar24 on x
About 1000 fewer passenger flights in the air over the US this morning compared to yesterday at the same time. Nearly 1900 flights on the move now and that number will grow as airline's process the backlog of flights created by today's #ITOutage. [image]
@bdsams Brad Sams on x
Not sure what's more alarming...Crowdstrike nuking have the Internet Or pushing to prod on a Friday.
@salisbot Dr Emma Salisbury on x
BREAKING: Militaries unaffected by CrowdStrike outage as their IT hasn't been updated since 2004
@us_stormwatch Colin McCarthy on x
12-hour timelapse of American Airlines, Delta, and United plane traffic after what was likely the biggest IT outage in history forced a nationwide ground stop of the three airlines. [video]
@wbm312 Whitney Merrill on x
We Y2K-ed ourselves anyways it seems.
@netcapgirl Sophie on x
idk what's worse, that crowdstrike has kernel access to basically every system in the world or that airlines run on windows server
@aaronoleary Aaron on x
They got the vegas ball. It's all over. We lost. [image]
@maxpollard92 Max Pollard on x
Microsoft outage but Teams and Outlook are both fine is the adult version of snow that doesn't settle enough for a school closure.
@nixcraft @nixcraft on x
Guys, I started working at the cybersecurity firm Crowdstrike. Today is my first day. Eight hours ago, I pushed major code to production. I am so proud of myself. I am going now home. I feel something really good is coming my way tomorrow morning at work 🥰🧑🏻‍💻
@vxunderground @vxunderground on x
CrowdStrike has performed the largest ransomware attack in history. Accidentally.
@matthewstoller Matt Stoller on x
Microsoft has had dominant market power in PC operating systems since the 1980s. For some reason we assume that because there are Macs and smartphones we ‘solved’ that problem. But no.
@benlovejoy @benlovejoy on x
Any time you're mulling on your own screw-ups, take comfort in the fact that you didn't break the world ...
@thepacketrat Sean Gallagher on x
Wow internet seems faster this morning for some reason . -posted from a Mac.
@elonmusk Elon Musk on x
@FT Biggest IT fail ever
@tomwarren Tom Warren on x
UPDATE: Microsoft tells me it's “aware of an issue affecting Windows devices due to an update from a third-party software platform. We anticipate a resolution is forthcoming.” #Crowdstrike #BSOD #windows https://www.theverge.com/...
@swiftonsecurity @swiftonsecurity on x
Just to be clear, fixing this CrowdStrike issue will require basically a human visit to every machine. Some of the machines will not be able to get into the recovery environment, and require a USB stick boot. Centrally fixing this is not possible it happens before anything loads.
@deitaone @deitaone on x
KLM SAYS FORCED TO SUSPEND MOST OF OPERATION DUE TO OUTAGE LUFTHANSA SAYS PROFILE, BOOKING RETRIEVAL FUNCTIONALITY LIMITED LOS ANGELES INTERNATIONAL AIRPORT CURRENTLY EXPERIENCING SOME MINOR DELAYS - SPOKESPERSON JETSTAR JAPAN SPOKESPERSON: MICROSOFT WINDOWS GLITCHES AFFECTING
@_thevivi Gabriel on x
CrowdStrike declaring an early weekend by taking out half the world's systems. Even ransomware isn't this effective 😂
@monkchips @monkchips on x
Happy International Endpoint Security day to all those who celebrate!
@alx @alx on x
CrowdStrike? More like CrowdStruck
@monkchips @monkchips on x
Honestly surprised it seems like neither Microsoft or crowdstrike have put out an official statement yet. Considering how feverishly social media is calling out their names....
@itcrowdtalk @itcrowdtalk on x
@troyhunt Summary CrowdStrike is aware of reports of crashes on Windows hosts related to the Falcon Sensor. Details Symptoms include hosts experiencing a bugcheck\blue screen error related to the Falcon Sensor. Current Action Our Engineering teams are actively working to resolve …
@gregegansf Greg Egan on x
Crowdstrike have advised that the world will be reverted to its last valid backup set, dated 7 Jan 2014, within the next 30 minutes. Please make paper notes of anything important to you from the intervening period, and tape them to your refrigerator door in a prominent position.
@jon9198 Jon Michalski on x
Stuck on the Tarmac at LAX cause we can't get a minor service card filled dude to IT system outages GLOBALLY with ALL airlines and apparently a bunch of other things. @united #outage #serviceinterruption [video]
@cameronwilson Cameron Wilson on x
Reports of Windows computers showing BSOD errors across a lot of different sectors: supermarkets, banks, broadcasters, etc. Downdetector, which shows crowdsourced reports of outages, going crazy rn [image]
@nixcraft @nixcraft on x
#linux users right now 🐧 [image]
@levie Aaron Levie on x
This is like the start of a dystopian sci-fi movie [video]
@chaudave David Chau on x
The dreaded Blue Screen of Death is affecting my #Windows laptop as well. (Thanks #Crowdstrike!!!) So that means no #ABC Finance Report from me tonight, because of the outage. Sorry everyone! (It would've been the the greatest finance EVER)! 😅 [image]
@charlesarthur Charles Arthur on x
One Crowdstrike and you're out.
@samdcbu Sam Butler on x
my parents are stranded in Juneau, and are telling me @Delta and @united are both grounded because of a @Microsoft patch gone wrong. Apparently also grounding flights in Australia. it's unfolding as I type, so just relaying what I've heard and am looking for confirmation
@_johnhammond John Hammond on x
This is CrowdStrike's Director of Overwatch, so I hope to help spread the word. I believe CS stopped these changes from being pushed out so machines late to the party wont get the faulty driver. Command in Safe Mode: del “C:\Windows\System32\drivers\CrowdStrik e\C- 00000291*.sys”
@fletcherlad @fletcherlad on x
Crowdstrike, if you are reading this: it's okay sweetie, mistakes happen. Take your own time as we don't need an update on this for at least a few business days.
@nathanmcnulty Nathan McNulty on x
Heads up for those running Crowdstrike :( For those in charge of any AV/EDR infrastructure, it's worth spending time thinking about how to best control and validate updates Be sure to consider how quickly you can respond and prevent something this this from rolling out broadly
@mdudas Mike Dudas on x
be kind to your it department today they're gonna need a hug
@senadaruc Senad Aruc on x
Looks like Crowdstrike Dooms Day it is real, many airline companies having issues with their systems. Schiphol airport is frozen. [image]
@rawsalerts @rawsalerts on x
What an interesting way to start my Friday morning with this CrowdStrike outage causing significant issues nationwide
@s3pirion Ben Platnick on x
crowdstrike outage has absolutely fucked SEATAC lmao. windows recovery screen the long way [image]
@tomwarren Tom Warren on x
god bless all the IT admins out there today 🐐In another life I used to look after trade floors and have experienced major outages. It's an incredibly stressful job 🫡
@_johnhammond John Hammond on x
CrowdStrike Falcon agents are imploding right now and causing a Blue Screen of Death boot loop on every endpoint. Reports of massive outages globally. https://www.reddit.com/...
@aeyakovenko @aeyakovenko on x
TIL all Microsoft windows machines are just thin clients into one giant windows computer. Sun Microsystems was 30 years too early!
@elonmusk Elon Musk on x
...
@cstanley Christopher Stanley on x
I am happy to report that X is not and will not be affected by the current global outage due to running CrowdStrike on your system.
@jjaron Jacob Aron on x
Does this mean that 2024 is the year of Linux on the desktop?
@gergelyorosz Gergely Orosz on x
@sinnet3000 A reminder that Microsoft / Windows is at fault here as well, not just Crowdstrike. Giving antivirus enough privileges to crash the OS always carries this risk. A more resilient OS does not let this happen. This would not happen at a Linux (or would be much harder to …
@refsrc Manish Singh on x
Microsoft spokesperson on the ongoing outage: “We're aware of an issue affecting Windows devices due to an update from a third-party software platform. We anticipate a resolution is forthcoming.”
@simokohonen Simo Kohonen on x
Latest #Crowdstrike update seems to be pushing machines into a BSOD loop. Major outages around the globe. [image]
@gergelyorosz Gergely Orosz on x
Oh wow - sounds like there are global outages across airlines globally (from LAX to BER), TV & radio stations from the UK to Australia and supermarkets in Australia thanks to the “Windows blue screen of death” for companies running Crowdstrike? This kind of impact is wild. [image…
@oliviasolon Olivia Solon on x
“Please check on Google for your gate number” - announcement at Heathrow Airport just now. Blue screens of death everywhere in terminal due to CrowdStrike update affecting Windows machines.
@ruskin147 Rory Cellan-Jones on x
Computer chaos takes down Sky News and many other services, flights, etc - @ciaranmartinoxf tells @BBCr4today it appears to be due to a problem with Crowdstrike and Windows [image]
@runasand Runa Sandvik on x
I was joking when I posted this photo from MAD, but appears a wonky update from @CrowdStrike is affecting airports around the world. Curious to know if the update was tested prior to deployment by the vendor and/or the clients. [image]
@craiu Costin Raiu on x
The potentially faulty Crowdstrike CSagent.sys hit VT last night. Compiled on July 9th. https://www.virustotal.com/... [image]
@davetroy Dave Troy on x
1/The global IT outage caused by a failed Crowdstrike software update can apparently be fixed by booting Windows into Safe Mode and deleting a file. This means millions of Windows machines need to be booted and fixed by hand. [image]
@joetidy Joe Tidy on x
If the windows outage is indeed a bug in Crowdstrike cyber security products it would be something we've not seen yet. Insurers would have a headache as the organisations affected did the *right* thing by having cyber protection which led to today's disaster. Ouch
@h4ckmanac @h4ckmanac on x
🚨CrowdStrike - Massive Outage Globally 🚨 The latest CrowdStrike update is causing a widespread issue resulting in a Blue Screen of Death (BSOD) boot loop globally. Many users are experiencing major outages due to this problem https://www.reddit.com/... #CrowdStrike [image]
@cstanley Christopher Stanley on x
This is not the first time this year CrowdStrike has caused issues on servers. I've had great success with SentinelOne for years. As with any EDR, they are a means to an end.
@stokel Chris Stokel-Walker on x
Good morning. Stay in bed today. Early reports suggest Crowdstrike Falcon - a computer threat checker used by lots (and lots and lots) of businesses pushed out an update that might have broken a lot of computers. Airlines, businesses etc affected
@elonmuskaoc Elon Musk on x
Engineers at Microsoft and CrowdStrike right now [image]
@johnb78 John B on x
Crowdstrike appear to have - I think the technical term is - fucked it
@nswpolice @nswpolice on x
Police are aware of the current system outage. For emergency situations, please dial 000.
@typesfast Ryan Petersen on x
The Microsoft / Crowdstrike outage has taken down the immigration systems at US airports. Only citizens with passports and green card holders can enter right now. Visitors queuing endlessly.
@amasad Amjad Masad on x
“CrowdStrike” sounds like a name you'd give to a bug like “HeartBleed”
@scottygb Scott Bryan on x
Sky News not having a good morning. [image]
@tomwarren Tom Warren on x
this isn't the first time that CrowdStrike's csagent.sys kernel driver has caused Windows BSODs. I'd imagine many executives are waking up this morning and immediately looking at moving away from CrowdStrike. It's very hard to win back trust after an event like this
@daviest_ Todd on x
Another day, another huge outage across multiple industries caused by a systemic dependence on a single firm. If resilience is what the Commission is looking for (not to mention innovation), then it would do well to closely scrutinise bottlenecks and mergers. [image]
@tferris Tommy on x
Microsoft Windows users right now. #crowdstrike #bsod [image]
@m363208 @m363208 on x
@iamakshayshar It is the otherway around.. #microsoft users chilling while Mac users still having to work 😂🤯 #Crowdstrike
@rmac18 Ryan Mac on x
So this was what y2k was supposed to be
@troyhunt Troy Hunt on x
If you're watching this unfold and aren't unfamiliar with the name “CrowdStrike”, they're a *massive* player in the security space and have billions of dollars of annual revenue. Their products include “EDR”, which is endpoint detection and response. Think of it as antivirus.
@andrewchiles Andrew Chiles on x
@troyhunt Delta Airlines in ATL hit [image]
@timdoering97 Tim Doering on x
@eddiemajor @troyhunt Yeah (Greetings from germany) [image]
@firstsquawk @firstsquawk on x
CROWDSTRIKE CEO ON OUTAGE: ACTIVELY WORKING WITH CUSTOMERS IMPACTED BY DEFECT FOUND IN A SINGLE CONTENT UPDATE FOR WINDOWS HOSTS. MAC AND LINUX HOSTS ARE NOT IMPACTED.
@letheforgot @letheforgot on x
@SwiftOnSecurity What we did was use the advanced restart options to launch the command prompt, skip the bitlocker key ask which then brought us to drive X and ran “bcdedit /set {default} safeboot minimal"which let us boot into safemode and delete the sys file causing the bsod.
@desusnice Desus MF Nice on x
yo @CrowdStrike you're a miserable bitch
@skynewsaust @skynewsaust on x
A major worldwide tech outage, believed to have been caused by a flawed anti-viral update from US cyber security company CrowdStrike, has plunged many of the world's largest companies into crisis and prevented Australian newsrooms from publishing the news.
@the_dream_saver Ashish Jha on x
Seems like this Crowdstrike issue is beyond my Jetstar flight! It is impacting retail payment systems, supermarkets, fuel stations, restaurants, travel systems and banks all around! F M L ! [image]
@tomwarren Tom Warren on x
Sky News is calling this “the most serious IT outage the world has ever seen.” I guess they don't remember Blaster then? 🙃
@_johnhammond John Hammond on x
I'd love to be able to see their messaging, but it is behind a login. [image]
@samwhyte Sam Whyte on x
Whoever's responsible for the Microsoft outage is getting fired anyway, so the smart thing to do would be knock Teams out for the day too and leave a hero.
@mehedih_ Mehedi on x
excited to announce i am joining Crowdstrike as a Senior Deploy Straight to Production Engineer
@sherieffyi @sherieffyi on x
The greatest culprit for loss of life, value, and property due to computer outages might just end up being security software - eclipsing ransomware in the process by an order or two of magnitude. Congratulations, CrowdStrike.
@jarofsteve Steve on x
Wow, Crowdstrike issue. Thoughts and prayers fellow IT guys and girls around the world.
@lukolejnik Lukasz Olejnik on x
Global Windows outage hits computers around the world. This is linked to Crowdstrike update that cripples boot process. There are some workarounds. Do you think it may be fixed automatically, somehow? Oh well ... https://supportportal.crowdstrike.com/ ... [image]
@jimwaterson Jim Waterson on x
Someone, somewhere, is the person who pressed go on that software update. And right now they know exactly what they did and what it has done. And as someone who knows that sinking feeling when you realise you've screwed up at work, I cannot imagine the state of them right now.
@baekdal Thomas Baekdal on x
Again, they are right... if you use Cloudstrike, your business will go down [image]
@stephenpunwasi Stephen Punwasi on x
CrowdStrike just knocked a bunch of newsrooms, airports, and gov facilities offline. Easy fix: reboot into safe mode & delete “C-00000291*.sys” in the crowdstrike driver folder, reboot, & you're good. But good luck finding someone to figure out that's what they need to do.
@mitsuhiko Armin Ronacher on x
Looks like crowdstrike took out loads of windows machines worldwide. If you see some BSODs today you know why. https://www.reddit.com/...
@sexenheimer Cam Smith on x
Bit of personal news - it's my first day at Crowdstrike as the guy who flicks the On switch every morning. Completely blanked on it today but reckon I will nail it Monday.
@h4ckmanac @h4ckmanac on x
#CrowdStrike Impacts by Region update at 1:20 pm UTC+04:00 Australia - Media: ABC, SBS, Seven Network, Nine Network - Airlines: Qantas, Virgin Australia, Jetstar - Airports: Sydney, Melbourne - Supermarkets: Woolworths, Coles - Banks: NAB, ANZ, Commonwealth Bank,
@ghazzzer @ghazzzer on x
@GergelyOrosz @sinnet3000 they had to deploy it on Friday [image]
@jimwaterson Jim Waterson on x
Sky News currently playing whalesong, seemingly because of a globally bodged external software update affecting a lot of companies.
@sxchopea @sxchopea on x
happy international bluescreen day😍 [image]
@ciaranmartinoxf Ciaran Martin on x
@ruskin147 @BBCr4today This screenshot is doing the rounds on this platform Rory - apparently from a Crowdstrike user platform which is paywalled. Lots of credible experts seeing this as the source of the problems I cannot verify this but it seems credible [image]
@troyhunt Troy Hunt on x
Just an important point on this as I'm seeing some misunderstandings: this is not a “Microsoft outage” (disclosure: I don't work there or speak for them, Regional Directors are totally independent), it's a CrowdStrike issue impacting Microsoft PCs.
@troyhunt Troy Hunt on x
The global scope of this is *MASSIVE*. Germany:
r/crowdstrike r on reddit
BSOD error in latest crowdstrike update
r/sysadmin r on reddit
Many Windows 10 machines blue screening, stuck at recovery
r/sysadmin r on reddit
Crowdstrike BSOD? — Anyone else experience BSOD due to Crowdstrike? I've got two separate organisations in Australia experiencing this.
r/worldnews r on reddit
Crowdstrike suffers major outage affecting businesses around the world
r/programming r on reddit
CrowdStrike update takes down most Windows machines worldwide
r/collapse r on reddit
Global IT outage live updates: Australian banks, airlines, media outlets taken offline
r/technology r on reddit
Major Internet Outage in US
r/brisbane r on reddit
Global IT outage live updates: Australian banks, airlines, media outlets taken offline
r/wallstreetbets r on reddit
Cybersecurity giant Crowdstrike suffers major outage affecting businesses around the world
r/wallstreetbets r on reddit
CrowdStrike Major Outage Grounding All Planes In US
r/technology r on reddit
Huge Microsoft Outage Linked to CrowdStrike Takes Down Computers Around the World
r/windows r on reddit
Major Windows BSOD issue takes banks, airlines, and broadcasters offline
r/newzealand r on reddit
PSA: Crowdstrike outage
r/worldnews r on reddit
United, Delta and American Airlines issue global ground stop on all flights
r/news r on reddit
United, Delta and American Airlines issue global ground stop on all flights
r/news r on reddit
global IT outage due to Crowdstrike
r/wallstreetbets r on reddit
Crowdstrike just took the internet offline.
@tomwarren Tom Warren on x
it looks like some IT admins are having luck with simply rebooting systems over and over. It seems the network stack comes up long enough to grab CrowdStrike's update https://x.com/...
@leokelion Leo Kelion on x
Interesting that there's no acknowledgement of responsibility in this. Wonder if there's more to tell...
@mikarv @mikarv on x
which crisis PR firm did you hire?
@snlyngaas Sean Lyngaas on x
Note the warning from the CrowdStrike CEO not to fall for scams that will likely pop up round this incident: “We further recommend organizations ensure they're communicating with CrowdStrike representatives through official channels."https://x.com/...
@marikakatanuma Marika Katanuma on x
Crowdstrike CEO said the issue has been identified and a fix has been deployed. “This is not a security incident or cyberattack,” he said. https://x.com/...
@iblametom Thomas Brewster on x
Direct from CrowdStrike cofounder here!
@marypcbuk.bsky.social Mary Branscombe on bluesky
Microsoft has been doing a dance with security vendors for a loooooong time trying to get them to use fewer of the things that can screw up systems. Will be interesting to see if they get more traction in future [embedded post]
@cstanley Christopher Stanley on x
Millions of executives around the world are being woken up and educated on what CrowdStrike is and what Endpoint Detection and Response tools do. They are also asking why it is taking down their entire company 😅 Happy Friday.
@swiftonsecurity @swiftonsecurity on x
You could build a PXE boot WIM file and have it execute a fix script but that will require telling everyone how to boot over the network. Very few have this skillset though and will likely require reconfiguring every network to do DHCP relay and won't work if machine locked down.
@swiftonsecurity @swiftonsecurity on x
You will also need the local admin LAPS password to do this... And many machines have a broken WinRE environment at least on the disk. Yeah it's pretty grim recovery situation in theory for any moderately complex organization...
@dylan522p Dylan Patel on x
Y2K24 - fuckload Windows Machines are absolutely fucked. Crowdstrike $crdw down 19% premarket They pushed out a buggy update (.sys files are kernel drivers, Crowdstrike's agent lives in the kernel) People's computers crashed It also fucks up booting into loading All affected
@swiftonsecurity @swiftonsecurity on x
Note this will not work if your machine is bitlocker encrypted without getting the recovery key for each machine...
@t3dotgg Theo on x
Pouring one out for all the IT people who have to explain “safe mode” to Carl on the sales team

Chronicles

BSODs hit thousands of Windows PCs due to “a defect” in an update from CrowdStrike, taking banks, airlines, and more businesses offline; Microsoft is aware

Related Coverage

Discussion