CrowdStrike hires outside security firms to review Falcon code

CrowdStrike hires outside security firms to review Falcon code

August 6, 2024 at 08:23PM

CrowdStrike has hired two outside security firms to review the Falcon sensor code after a global IT outage. The incident was caused by a simple mistake in an update to detect novel attack techniques on Windows machines. CrowdStrike has implemented fixes and is conducting more tests to prevent similar issues in the future.

From the provided meeting notes, it’s clear that CrowdStrike has taken significant steps to address the code issue that caused the global IT outage. They’ve hired outside security firms to review the Falcon sensor code, identified the root cause, and implemented a fix to prevent similar incidents in the future. Additionally, they are enhancing their testing processes and deployment approach to avoid flawed updates reaching customers.

The company has also stated its commitment to learning from the incident and improving its services to better protect its customers. However, it’s notable that they are facing legal action from investors for not initially using a phased approach in sending updates to customers.

It’s worth noting that CrowdStrike has not disclosed the names of the reviewing partners, and the focus of the reviews is on the code and processes that led to the incident on July 19.

Full Article