CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales

Massive outage spooked customers that had been expected to close deals totaling $60 million during the final few weeks of CrowdStrike’s fiscal Q2.
The post CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sa… Continue reading CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales

Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident

Microsoft has called together cybersecurity firms and government representatives for its Windows Endpoint Security Ecosystem Summit.
The post Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident appeared first on SecurityWeek.
Continue reading Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident

AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’

Many AMD CPUs are affected by the new Sinkclose vulnerability, but the chipmaker noted that the flaw is not easy to exploit.
The post AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’ appeared first on Secur… Continue reading AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’

Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains

The vulnerabilities, patched in OpenVPN 2.6.10, expose users on the Windows platform to remote code execution attacks.
The post Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains appeared first on SecurityWeek.
Continue reading Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains

GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU

Researchers disclose the details of GhostWrite, a RISC-V CPU vulnerability that can be exploited to gain full access to targeted devices.
The post GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU appeared first on SecurityWeek.
Continue reading GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU

CrowdStrike engages external experts, details causes of massive outage

CrowdStrike has published a technical root cause analysis of what went wrong when a content update pushed to its Falcon sensors borked over 8.5 million Windows machines around the world on July 19, and has confirmed that it has hired two unnamed third-… Continue reading CrowdStrike engages external experts, details causes of massive outage

CrowdStrike Explains Why Bad Update Was Not Properly Tested

CrowdStrike has shared a preliminary incident review, explaining why the update that caused global chaos was not caught by testing. 
The post CrowdStrike Explains Why Bad Update Was Not Properly Tested appeared first on SecurityWeek.
Continue reading CrowdStrike Explains Why Bad Update Was Not Properly Tested

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware 

KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware.”
The post KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware  appeared fi… Continue reading KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware 

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool

Microsoft says roughly 8.5 million Windows devices were impacted by the faulty software update from CrowdStrike, and published a tool to help admins through the recovery process.
The post Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStri… Continue reading Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool