Worldwide issue with CrowdStrike [BSOD]

[Maxstar]

https://twitter.com/x/status/1814174010202345761

Sky News goes off air after worldwide tech outage linked to Microsoft

Several media companies, tech companies, and schools or universities are reporting a Blue Screen of Death on Windows 10. PCs are getting stuck at the “Recovery” screen, which states, “It looks like Windows didn’t load correctly. If you’d like to restart and try again, choose Restart my PC below.”

Security company CrowdStrike confirmed the massive Windows 10 BSOD outage is due to its new sensors update. As you probably know, CrowdStrike offers endpoint protection and other services, which are used by every other company, but a new update for CrowdStrike sensors is causing significant issues.

Windows 10 BSOD, stuck at recovery due to CrowdStrike, but there's a fix

 

[xrobwx71]

I'm hearing this morning on the radio during my commute that it was a cyberattack. Some banks are affected, airplanes have been grounded, etc.

As I'm looking it up, they are saying it's NOT a cyberattack. Hmmm.

Man, it's super easy to disrupt our lives as we are dependent on technology to a degree I'm afraid a lot of people would not survive if it was long term.

 

[Maxstar]

CrowdStrike is a topnotch company into the cyber security branch, and as stated it's not a cyber attack

https://twitter.com/x/status/1814235001745027317

I'm afraid a lot of people would not survive if it was long term.

I agree, many hospitals in the Netherlands have postponed their operations too, Airport Schiphol is a complete mayhem...

 

[Tekno Venus]

I'm seeing accounts that it was a lapse in testing from crowdstrike, pushing out an untested change without going through the normal verification channels.

Throwaway account... CrowdStrike in this context is a NT kernel loadable module ... | Hacker News

The issue with the fix is that affected devices are bootlooping, so for many devices it's not possible to fix remotely...

 

[Maxstar]

It seems they are working on a workarround to release a new channel file which should be picked-up after the system failed to boot properly?

https://twitter.com/x/status/1814186136149037459

 

[Maxstar]

This thread at X might be interesting for the BSOD experts / developers.

https://twitter.com/x/status/1814376668095754753

 

[A Guy]

https://twitter.com/x/status/1814364640127922499

A Guy

 

[Will]

A good video from "Dave's Garage" (a former early Microsoft employee, who created the original Task Manager among other things) that covers the update in more detail:

 

[Will]

CrowdStrike is a topnotch company into the cyber security branch, and as stated it's not a cyber attack

Their reputation has certainly taken a hit...

I suspect the main concerns from companies, aside from any financial damage that occured, will be: why did Crowdstrike ignore their staging instructions? (updates were automatically applied to all machines, regardless of rollout policies that should have tested them on smaller batches first), and why did the driver not have better error handling for the definition files?

 

[Maxstar]

Their reputation has certainly taken a hit...

That is absolutely true, yesterday I received the following mail from RealVNC to inform their users about the Crowdstrike issue. I assume many companies get questions on this, so this might not be the last mail I guess! Since it was one of the biggest outages in years!

 

[A Guy]

A Guy