Criterion Title Agency的动态

The ongoing global IT outage being reported in the news is a very unfortunate event. It shows what can happen when organizations prioritize meeting regulatory checkbox requirements ahead of mission-critical workloads. Unfortunately, when a third party can execute code on your computer, it is no longer your computer. Employing these tools, which auto-update themselves on production systems without passing through your organization’s testing and validation gates first, runs counter to industry standards. This is often the case with agent-based tools. They are used by organizations across multiple industries and capacities including security and system updates, for example. This risk also entails using so-called “best in breed” or most recommended tools, which creates a monoculture in software. Providers making a small mistake, in such a monoculture, can quickly have a global impact. Two Things You Can Do To Mitigate Your Risk: ? Consider using agentless tools over agent-based tools ? If you have to use agent-based tools, control their updates, and run them through your usual QA cycle in your test environment before deploying to staging and production We can help your organization meet your regulatory goals using a holistic approach based on best practices.

The aftermath of yesterday’s incident: we need to apply the basic principle of redundancy for critical infrastructure systems. But what is redundancy? Having two or more systems on stand by so that they could take over in case of a failure from the primary will only work if they are different in some way, because if they have the same version and brand, something like yesterday’s issue will still happen. 'Painful' wake-up call: What's next for CrowdStrike, Microsoft after update causes outage? https://lnkd.in/ew8Skqh2

?? Microsoft CrowdStrike outage workaround - what you need to know. https://lnkd.in/ekiCXuYH #Crowdstrike #CrowdStrikeUpdate #Crowdstrikeoutage

Microsoft estimates that 8.5m computers around the world were disabled by the global IT outage last Friday... The average cost of IT downtime is a staggering ￡4,400 per minute (Gartner, 2024). Extended IT outages not only drain financial resources but also disrupt operations, frustrate employees, and irreparably harm your relationship with clients. The message of the incident is unequivocal - Make sure you've got adequate IT support and have contingency plans in place for all eventualities. Whilst businesses must ensure they are modernising IT infrastructure to eliminate downtime and enhance efficiency, they also ought to have incident response plans in place for how to react to Black Swan events when they do happen. #CrowdStrike #Microsoft #ITdowntime

Huge Microsoft #outage caused by an update CrowdStrike pushed for its Falcon product. The update seems to cause every endpoint to experience a blue screen of death. YIKES! Airlines, banks, retail stores, news outlets, etc. are impacted globally. Terrible look for CrowdStrike and Microsoft. ?? How does this even happen in 2024?!?!? There are some initial work arounds highlighted here. We hope to get more answers soon. #epp #edr #xdr #outage https://lnkd.in/ePZxYEta

This article shares insights from the Microsoft Deputy CISO about the events around the CrowdStrike outage, the blue screens of death, and how the industry came together to respond. #techcommunity #globaloutage https://lnkd.in/gFxg9MJp

Morphisec doesn't require signatures, and provides a prevention-first approach to your cyber security, using Automated Moving Target Defense. Now that we've seen the worst case scenario, what's the excuse for not trying a different approach? #AMTD #cybersecurity

A recent CrowdStrike update has caused widespread disruptions, crashing Windows computers and triggering the infamous Blue Screen of Death. This issue has left companies worldwide, including Sky News, unable to operate normally. Users have reported being stuck in boot loops, severely impacting business operations. The problem, stemming from CrowdStrike’s Falcon Sensor product, has affected airports, businesses, and broadcasters, grounding planes and disrupting services globally. CrowdStrike engineers are working on a solution, while Microsoft has also started mitigation actions to address related service in the U.S. https://lnkd.in/gy2fJdDF

The recent Microsoft outage, which led to the dreaded “Blue Screen of Death” for many users, has caused significant disruptions. ? Linked to a CrowdStrike sensor update, this incident affected individual users, critical infrastructure, and large organisations alike. ? Our latest blog aims to shed light on this situation, providing clarity and support during this stressful time. ? We know how impactful such outages can be, causing operational challenges and instability. We're committed to offering the help and support you need. ? Please read the blog below ?? https://lnkd.in/ewAxEXFK ? #CyberSecurity #MicrosoftOutage #CrowdStrike?

The recent major blue screen outbreak caused by a faulty CrowdStrike signature update highlights the inherent risks of relying on signature-based detection. This isn't the first instance, as similar issues have occurred with other vendors too. Such incidents can lead to reduced sensitivity in tuning the matching algorithms, potentially allowing more malware to slip through. I know everyone is focused now on physically fixing the knob on the door—much like having to reboot in safe mode and manually delete a file to reset a malfunctioning system. While this immediate fix addresses the problem, it underscores the need to enhance ML-based detection with deterministic prevention methods. #infosec #AMTD #Morphisec Update : As expected, the cause for the update is a behavior signature update, more specifically related to lateral movement techniques using named pipes. Possibly a logical error in driver parsing or something similar https://lnkd.in/e9QgqeMm