Delta officially launches lawyers at $500M CrowdStrike problem

October 28, 2024 at 10:20AM Delta Air Lines is suing CrowdStrike for approximately $500 million in lost revenue due to a severe IT outage in July that led to 7,000 canceled flights affecting over a million customers. CrowdStrike argues Delta’s claims stem from misinformation and inadequate IT infrastructure, while the airline navigates a federal investigation. … Read more

Delta Sues Cybersecurity Firm CrowdStrike Over Tech Outage That Canceled Flights

October 28, 2024 at 04:50AM Delta Air Lines is suing CrowdStrike, alleging that the cybersecurity firm compromised standards, resulting in a global technology outage that caused thousands of flight cancellations in July. **Meeting Notes Takeaways:** 1. **Delta Air Lines Legal Action**: Delta Air Lines has initiated a lawsuit against CrowdStrike. 2. **Reason for the Lawsuit**: … Read more

USDoD hacker behind National Public Data breach arrested in Brazil

October 16, 2024 at 05:54PM Brazil’s Polícia Federal arrested hacker USDoD, linked to high-profile data breaches, in “Operation Data Breach.” Identified as Luan BG, the Brazilian hacker leaked sensitive data from InfraGard and the National Public Data. His downfall came after targeting CrowdStrike, which exposed his identity, leading to his apprehension. ### Meeting Takeaways: 1. … Read more

The Perils of Ignoring Cybersecurity Basics

October 8, 2024 at 02:17PM CrowdStrike’s software update caused 8 million Windows devices to go offline, impacting hospitals, airlines, payment platforms, and emergency services. The issue stemmed from poor patch management and violated risk management policies. Experts recommend staged rollout of patches and diversifying operating systems to mitigate vulnerabilities, and note potential implications for cyber … Read more

MoneyGram: No evidence ransomware is behind recent cyberattack

October 6, 2024 at 11:50AM MoneyGram suffered a cyberattack causing a five-day system outage in September. While customers suspected ransomware, MoneyGram denies evidence of it. Investigation with external cybersecurity experts and law enforcement confirmed no ransomware involvement, with systems now operational. The attack, initiated through social engineering on the company’s internal help desk, was blocked … Read more

CrowdStrike Overhauls Testing and Rollout Procedures to Avoid System Crashes

September 24, 2024 at 04:12PM CrowdStrike has overhauled its testing and update processes to avoid a recurrence of the disruptive July outage on Windows systems. Vice President Adam Meyers outlined new protocols, such as controlled software rollouts, improved code validation, and expanded testing to cover various scenarios. The changes aim to prevent similar system failures … Read more

Cybersecurity Products Conking Out After macOS Sequoia Update

September 23, 2024 at 07:55AM macOS 15 Sequoia’s release has caused disruptions for cybersecurity software and network connectivity. Users reported issues with security solutions from CrowdStrike, ESET, Microsoft, and SentinelOne, as well as connectivity problems and browser malfunctions. Apple was aware of the problems, yet still released the update. Workarounds and risks have been suggested … Read more

macOS Sequoia change breaks networking for VPN, antivirus software

September 20, 2024 at 11:47AM Users of macOS 15 ‘Sequoia’ are experiencing network connection errors when using certain EDR or VPN solutions and web browsers. Issues are resolved when these tools are deactivated, indicating network stack incompatibility. Some products advised against upgrading to macOS 15 due to networking structure changes. Temporary solutions and advisories have … Read more

1 in 10 orgs dumping their security vendors after CrowdStrike outage

September 19, 2024 at 12:19PM Germany’s Federal Office for Information Security reports 1 in 10 German organizations affected by CrowdStrike’s July outage are dropping their current vendor’s products. 4% have already abandoned solutions, with another 6% planning to do so. Despite potential business impacts, the incident hasn’t hurt CrowdStrike much yet. The findings are from … Read more

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel

September 13, 2024 at 02:39PM Microsoft is redesigning anti-malware products’ interaction with Windows kernel to prevent a repeat of the global IT outage caused by a faulty CrowdStrike update. This will involve new platform capabilities in Windows 11, focusing on security and resilience goals. Microsoft aims to enforce Safe Deployment Practices for updates to avoid … Read more