Connect with us

Published

1 year ago

on

CrowdStrike recently published a post-incident review (PIR) concerning a faulty update that caused 8.5 million Windows machines to crash last week. The report attributes the issue to a bug in the test software that failed to properly validate the content update before its widespread release on Friday. In response, CrowdStrike has committed to enhancing its content update testing procedures, improving error handling, and adopting a phased deployment strategy to prevent similar incidents in the future.

CrowdStrike’s Falcon software, which is used globally by businesses to protect against malware and security breaches on millions of Windows machines, received a problematic content configuration update last Friday. This update, intended to gather telemetry on potential new threat techniques, caused Windows systems to crash.

Typically, CrowdStrike issues configuration updates in two forms: Sensor Content updates, which directly update the Falcon sensor running at the kernel level in Windows, and Rapid Response Content updates, which modify the sensor’s behavior to detect malware. The issue last Friday was triggered by a small 40KB Rapid Response Content file.

While Sensor Content updates are not delivered via the cloud and often include AI and machine learning models to enhance detection capabilities over time, Rapid Response Content updates like the one released last Friday are designed to configure these detection capabilities. CrowdStrike manages its own cloud system to perform validation checks on content before release to avoid incidents like the one experienced.

Last week, CrowdStrike released two Rapid Response Content updates, also known as Template Instances. Due to a bug in the Content Validator, one of these instances passed validation despite containing problematic data, according to CrowdStrike.

Although CrowdStrike performs both automated and manual testing on Sensor Content and Template Types, the Rapid Response Content released last Friday did not undergo the same level of thorough testing. Confidence in the Content Validator, bolstered by a March deployment of new Template Types, led to an assumption that the Rapid Response Content rollout would be issue-free. This assumption proved incorrect when the sensor loaded the problematic Rapid Response Content, resulting in an out-of-bounds memory exception and subsequent Windows crashes (BSOD).

To prevent future occurrences, CrowdStrike plans to enhance its Rapid Response Content testing through local developer testing, content update and rollback testing, stress testing, fuzzing, and fault injection. Additionally, CrowdStrike will conduct stability and content interface testing on Rapid Response Content.

CrowdStrike is also improving its cloud-based Content Validator to better scrutinize Rapid Response Content releases. “A new check is in process to guard against this type of problematic content from being deployed in the future,” the company stated.

Furthermore, CrowdStrike will enhance error handling in the Content Interpreter, part of the Falcon sensor, and implement staggered deployments of Rapid Response Content. This phased approach will ensure updates are gradually rolled out to larger portions of the install base instead of being pushed to all systems simultaneously. Both driver improvements and staggered deployments have been recommended by security experts following the recent incident.

Related Topics:

Cosbom provides useful digital tips and resources on software, apps and gadgets you can't live without.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech News

Apple’s “Awe Dropping” Event: iPhone 17 Air and Everything to Expect This Tuesday

Apple’s biggest product launch in years is just 48 hours away, and the iPhone 17 Air could be the most radical iPhone redesign since the iPhone X. Here’s everything we know about Tuesday’s event.

Published

24 hours ago

on

September 7, 2025

By

Apple’s highly anticipated fall event is scheduled for Tuesday, September 9 at 10 AM PT (10:30 PM IST), promising what could be the company’s biggest product refresh in years.

Concept render of iPhone 17 and iPhone 17 Air showing their rear designs and camera setups

The iPhone 17 Lineup:

  • iPhone 17 Air: Ultra-thin at just 5.5mm thick, 6.6-inch 120Hz display, A19 chip
  • iPhone 17 Pro: Starting at $1,099 (up $100), 256GB base storage
  • iPhone 17 Pro Max: Redesigned camera system
  • Standard iPhone 17: Expected pricing and specs
  • Major Software Updates:
  • Apple will announce the official release dates for its 2025 software lineup, all numbered with “26” to represent the September 2025-2026 season:
  • iOS 26: Features the new “Liquid Glass” user interface, redesigned Camera app, enhanced ChatGPT integration, improved Apple Intelligence capabilities
  • iPadOS 26: Introduces a completely new windowing system, Preview app for iPad, enhanced Files app with folder customization, Background Tasks for intensive operations
  • macOS Tahoe 26: New features and improvements for Mac users
  • watchOS 26: Updated features for Apple Watch
  • visionOS 26: Updates for Vision Pro headset
  • The iOS 26 public release is expected around September 15-16, with release candidates available immediately after the September 9 event.
watchOS 26
iPadOS 26
macOS 26
iOS 26

Other Expected Launches:

  • Apple Watch Series 11 and Ultra 3
  • AirPods Pro 3 with health tracking
  • Possible Mac updates
iOS 26 Liquid Glass interface on iPhones showing translucent app icons and widgets
Apple Watch Series 11 render displaying time and fitness app with a floral background

Key Dates:

  • Event: September 9, 10 AM PT (10:30 PM IST)
  • Pre-orders: September 12, 5 AM PT
  • iOS 26 Release: September 15-16 (expected)
  • Hardware Release: September 19

The iPhone 17 Air represents Apple’s biggest design shift in years, prioritizing thinness over battery life with only a single rear camera.

Continue Reading

Tech News

Red Sea Cable Cuts Cripple Microsoft Azure, Disrupt 17% of Global Internet Traffic

Multiple undersea fiber optic cables were cut in the Red Sea, disrupting Microsoft Azure services and slowing internet traffic across Asia, the Middle East, and Europe—affecting nearly 17% of global connectivity.

Published

1 day ago

on

September 7, 2025

By

Multiple undersea fiber optic cables in the Red Sea were damaged, causing significant disruptions to Microsoft’s Azure cloud platform and affecting internet connectivity across India, Pakistan, UAE, and other regions.

The impact:

  • Microsoft Azure users experiencing increased latency, especially for Asia-Europe traffic routes
  • Nearly 17% of global internet traffic flows through Red Sea cables
  • Key systems affected include SMW4, IMEWE, SEACOM/TGN-EA, AAE-1, and EIG cables
  • Failures occurred near Jeddah, Saudi Arabia

Microsoft’s response: “Undersea fiber cuts can take time to repair; as such, we will continuously monitor, rebalance, and optimize routing to reduce customer impact in the meantime.”

The broader concern: The Red Sea is one of the world’s most critical internet chokepoints. With ongoing regional conflicts, experts worry critical digital infrastructure could become deliberate targets.

Repair timeline: Subsea cable repairs typically take weeks due to the logistics of mobilizing cable repair ships and securing permits in politically sensitive waters.

Continue Reading

Tech News

Tesla’s AI5 Chip Breakthrough: Musk Calls It “Epic,” Promises Life-Saving Technology

Elon Musk just announced Tesla completed design review for their AI5 chip and it’s going to be ‘epic’—while simultaneously recruiting engineers to join Tesla’s silicon team to work on ‘life-saving’ chips where ‘milliseconds matter.

Published

1 day ago

on

September 7, 2025

By

Image: NurPhoto via Getty Images

Tesla CEO Elon Musk announced a major breakthrough today with the company’s AI5 chip design, calling it “epic” and predicting the upcoming AI6 could be “the best AI chip by far”.

In a social media post, Musk revealed: “Just had a great design review today with the Tesla AI5 chip design team! This is going to be an epic chip. And AI6 to follow has a shot at being the best AI chip by far.”

What makes this significant:

  • Tesla is consolidating from two chip architectures to one, focusing all silicon talent on a single incredible chip
  • Musk believes AI5 will be “the best inference chip for models with fewer than 250 billion parameters”
  • The chip offers “the lowest silicon cost and highest performance-to-power ratio”
  • AI6 is expected to advance these capabilities even further

The job recruitment angle: Musk is actively recruiting engineers, emphasizing they’d be working on chips that “save lives” where “milliseconds matter”—clearly referencing Tesla’s autonomous driving ambitions.

This comes after Tesla shut down its Dojo supercomputer project last month, with the company deciding to focus resources on a single chip architecture rather than splitting development.

Continue Reading

Trending