Cybersecurity company CrowdStrike has had a hectic week after a faulty update caused a global Microsoft Windows outage. The CEO is now set to testify before US Congress to explain the mishap. But before that, CrowdStrike has released a Preliminary Post Incident Review (PIR) shedding light on what went wrong.
According to CrowdStrike’s report, the issue stemmed from a bug in the delivery of updates for its Falcon Sensor product, resulting in the infamous blue screen of death for Windows users worldwide. IT admins scrambled to fix the issue, with Microsoft also releasing a tool to aid in recovery.
The PIR revealed that a Rapid Response Content update with an undetected error caused the crash, leading to an out-of-bounds memory read triggering an exception and ultimately crashing the Windows operating system. CrowdStrike has since outlined steps to prevent such incidents in the future, including a staggered deployment strategy for updates and improved monitoring.
Security experts have weighed in, suggesting that a staged rollout procedure for updates could have mitigated the issue. While CrowdStrike is working to rectify the situation, the incident has undoubtedly tarnished its reputation, emphasizing the importance of thorough quality assurance processes in the tech industry.