97% CrowdStrike systems back to normal

CrowdStrike CEO George Kurtz said Thursday that 97 percent of all Windows systems running the company`s Falcon Sensor software are back online, a week after an outage linked to the company’s security software update caused flight delays and cancellations, among many other disruptions caused by the emergency system.That means about 250,000 systems still need to be brought back online.Microsoft Vice President John Cable said in a blog post that the company has ‘‘more than 5,000 support engineers working around the clock‘‘ to clear up the disruptions caused by the CrowdStrike update, and hinted at who might help if they don’t show up for the Windows changes.‘‘This incident clearly demonstrates the need for Windows to prioritize change and innovation in the area of ​​end-to-end resiliency,‘‘ Cable wrote.

Cable cited VBS Enclaves and Azure Attestation as examples of products that can keep Windows secure without needing kernel-level access, as most Windows-based security products do today (including CrowdStrike`s Falcon Sensor).He didn’t elaborate on what specific changes will be made to Windows, however, saying only that Microsoft will continue to ‘‘work openly and collaboratively with the Windows ecosystem to harden the platform and make it more resilient to the broader security community.

However, previous attempts by Microsoft to exclude third-party security companies from the Windows kernel (as recently as Windows Vista) met with resistance from regulators at the European Commission.Current attempts to restrict third-party access to the Windows kernel are likely to invite similar criticism.CrowdStrike Aftermath CrowdStrike made its own promises after the outage, including more thorough testing of updates and phasing in systems to prevent a faulty update file from causing major problems like those last week.

Some systems could be repaired by simply rebooting them, but this had to be done up to 15 times.This gave the systems a chance to get new update files before they crashed.For the rest, IT administrators had to restore from backups or manually remove the faulty update files.And not all of CrowdStrike`s repair solutions were well received.

More Articles & Posts