The Perils of Ignoring Cybersecurity Basics

October 8, 2024 at 02:17PM CrowdStrike’s software update caused 8 million Windows devices to go offline, impacting hospitals, airlines, payment platforms, and emergency services. The issue stemmed from poor patch management and violated risk management policies. Experts recommend staged rollout of patches and diversifying operating systems to mitigate vulnerabilities, and note potential implications for cyber … Read more

MoneyGram: No evidence ransomware is behind recent cyberattack

October 6, 2024 at 11:50AM MoneyGram suffered a cyberattack causing a five-day system outage in September. While customers suspected ransomware, MoneyGram denies evidence of it. Investigation with external cybersecurity experts and law enforcement confirmed no ransomware involvement, with systems now operational. The attack, initiated through social engineering on the company’s internal help desk, was blocked … Read more

CrowdStrike Overhauls Testing and Rollout Procedures to Avoid System Crashes

September 24, 2024 at 04:12PM CrowdStrike has overhauled its testing and update processes to avoid a recurrence of the disruptive July outage on Windows systems. Vice President Adam Meyers outlined new protocols, such as controlled software rollouts, improved code validation, and expanded testing to cover various scenarios. The changes aim to prevent similar system failures … Read more

Cybersecurity Products Conking Out After macOS Sequoia Update

September 23, 2024 at 07:55AM macOS 15 Sequoia’s release has caused disruptions for cybersecurity software and network connectivity. Users reported issues with security solutions from CrowdStrike, ESET, Microsoft, and SentinelOne, as well as connectivity problems and browser malfunctions. Apple was aware of the problems, yet still released the update. Workarounds and risks have been suggested … Read more

macOS Sequoia change breaks networking for VPN, antivirus software

September 20, 2024 at 11:47AM Users of macOS 15 ‘Sequoia’ are experiencing network connection errors when using certain EDR or VPN solutions and web browsers. Issues are resolved when these tools are deactivated, indicating network stack incompatibility. Some products advised against upgrading to macOS 15 due to networking structure changes. Temporary solutions and advisories have … Read more

1 in 10 orgs dumping their security vendors after CrowdStrike outage

September 19, 2024 at 12:19PM Germany’s Federal Office for Information Security reports 1 in 10 German organizations affected by CrowdStrike’s July outage are dropping their current vendor’s products. 4% have already abandoned solutions, with another 6% planning to do so. Despite potential business impacts, the incident hasn’t hurt CrowdStrike much yet. The findings are from … Read more

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel

September 13, 2024 at 02:39PM Microsoft is redesigning anti-malware products’ interaction with Windows kernel to prevent a repeat of the global IT outage caused by a faulty CrowdStrike update. This will involve new platform capabilities in Windows 11, focusing on security and resilience goals. Microsoft aims to enforce Safe Deployment Practices for updates to avoid … Read more

Identity of Notorious Hacker USDoD Revealed

August 27, 2024 at 06:24AM Notorious hacker USDoD, also known as EquationCorp, is believed to be Luan B.G., a 33-year-old man from Brazil. Investigations by CrowdStrike and Predicta Lab uncovered his true identity and links between his online personas and social media profiles. USDoD has leaked data from various organizations, but some of his claims … Read more

Degraded Performance Issue Sparks Concern Among CrowdStrike Customers

August 23, 2024 at 08:03AM Some CrowdStrike customers experienced degraded performance due to a cloud service issue, causing disruptions and concern over potential serious problems. However, the issue only affected some services and a limited number of customers. CrowdStrike quickly addressed the problem, confirmed the cause, and assured customers that performance was returning to normal. … Read more

CrowdStrike Hits Back at Action1 Following $1 Billion Acquisition Rumors

August 22, 2024 at 08:45AM CrowdStrike denied engaging in significant acquisition talks with Action1 amidst rumors of a potential $1 billion deal. This followed an email from Action1’s CEO confirming CrowdStrike’s interest in the acquisition. However, Action1 ultimately rejected the acquisition, prompting CrowdStrike to refute the claims, stating they only had one brief conversation and … Read more