A faulty CrowdStrike update disables Windows systems worldwide
CrowdStrike identifies a defective Falcon content update as the cause of widespread Windows crashes, leaving administrators to recover affected machines through hands-on remediation.
Windows computers running CrowdStrike's Falcon security software crashed around the world today after receiving a faulty content update. CrowdStrike says the incident is a software defect rather than a cyberattack and has deployed a corrected update.
Affected machines can enter repeated blue-screen failures before they remain online long enough to receive the fix. Administrators may need to start each system in a recovery mode and remove the problematic file, a difficult task across remote offices and large fleets.
The disruption reaches airlines, banks, broadcasters and other organizations that depend on Windows endpoints. It shows how a trusted security tool, operating with deep system access and updated centrally, can become a single channel for widespread failure. Recovery speed will vary with encryption keys, physical access and device-management practices. After services return, customers will demand clearer testing, staged deployment and rollback controls for updates capable of reaching critical machines in minutes.
Source: CrowdStrike guidance ↗