Stay ahead of the headlines

Jul 22, 2024·LinkedIn

The integration of AI and large language models (LLMs) in healthcare is transforming patient care and operational efficiency but also brings significant cybersecurity challenges. Healthcare systems are increasingly targeted by ransomware attacks, as evidenced by the high-profile hack of UnitedHealth Group's Change Healthcare. AI systems, due to their complex and opaque structures, may be even more vulnerable to breaches than traditional IT systems. Compromised AI can lead to inaccurate diagnoses, inappropriate treatments, and fraudulent claims, with substantial financial consequences and risks to patient safety. Healthcare leaders must adopt robust cybersecurity practices, continuously evaluate AI models, demand transparency from developers, and push for regulatory frameworks and industry-wide standards to secure AI systems. Collaborative efforts among stakeholders are crucial to harness AI's potential while safeguarding healthcare integrity.

Jul 22, 2024·arstechnica

CrowdStrike has released a patch that addresses a series of vulnerabilities requiring users to reboot their systems multiple times. The fix process can become more complex depending on the specific issues encountered, highlighting the intricate nature of cybersecurity maintenance. Details on the step-by-step remediation, affected systems, and user experience during the patching process were discussed to provide a comprehensive overview of the updates necessary for securing the environments where CrowdStrike is deployed.

Jul 22, 2024·LinkedIn

Shawn Henry, Chief Security Officer at CrowdStrike, acknowledged a serious failure on their part last Friday, which has significantly impacted their customers and partners. With a career spanning almost 40 years, including 24 years at the FBI, Henry's aim has always been to "protect good people from bad things." After transitioning to CrowdStrike in 2012, the company successfully fought against cyber threats for over a decade. Despite this recent failure, which he describes as a profound gut punch, CrowdStrike is working round the clock to restore customer systems and regain the lost trust. Henry assures stakeholders that the team is committed to emerging stronger and better from this challenging experience.

Jul 22, 2024·publication

CrowdStrike has addressed an issue affecting Windows hosts caused by a defect in a recent Falcon content update. While Mac and Linux systems were not impacted, the defect triggered blue screen errors and other disruptions on Windows host systems. A fix has been deployed, reverting to a stable version of the problematic file, and CrowdStrike has ensured that their Falcon platform systems are not compromised. Customers are advised to stay updated through official CrowdStrike channels and verify communications to avoid exploitation by adversaries. Detailed remediation steps and resources are available on the CrowdStrike support portal.

Jul 20, 2024·wired.com

In response to a major Crowdstrike outage, Jeff D., Vice President & CTO at Parkland Health, shared key lessons on LinkedIn. He highlighted the fallibility of even top-tier tech companies, the dual nature of protective tools, and the drastic impact of tech absences. He emphasized the need for automated vendor fixes, thorough preparation for major events, and robust downtime procedures spearheaded by business process owners, not IT. The event underscores the importance of vigilance, preparedness, and effective crisis management in maintaining business continuity in technology-dependent environments.

Jul 20, 2024·LinkedIn

William Walders highlights the critical need for organizations to prepare for disruptions not only from direct IT issues but also from third-party services. Reflecting on the recent CrowdStrike outage, he emphasizes the inevitability of operational disruptions from various sources like natural disasters and cyber incidents. Walders advocates for robust business continuity plans, strong internal and external relationships, and flexible IT infrastructure to ensure effective recovery. He also underscores the importance of digital adoption and leveraging BYOD capabilities for seamless work continuity, stressing that preparation and communication are essential for navigating such challenges successfully.

Jul 20, 2024·The Cyber Security Hub™

A recent global IT outage caused by a bug in CrowdStrike's "Falcon Sensor" antivirus software has affected numerous sectors including airlines, hospitals, and banks. The issue led to Windows systems crashing and displaying a blue screen, disrupting services and operations worldwide. CrowdStrike CEO George Kurtz clarified that the incident was due to a software defect and not a cyberattack. The company has identified the issue, deployed a fix, and issued a manual workaround for affected clients. Despite these efforts, recovery is ongoing, with many organizations and emergency services significantly impacted.

Jul 20, 2024·Statement on Falcon content update for Windows Hosts

CrowdStrike acknowledged a defect in a specific content update affecting Windows hosts, which caused crashes identified by a blue screen error related to the Falcon Sensor. The issue does not affect Mac or Linux hosts and has been isolated and resolved with a fix now deployed. Unaffected Windows systems require no action, while impacted systems must follow workaround steps to delete the problematic channel file. Customers are advised to stay updated via the support portal and ensure communication with CrowdStrike through official channels. The Falcon platform systems and services remain operational and unaffected by this issue.

Jul 20, 2024·The Cyber Security Hub

CrowdStrike identified a specific file, “C-00000291*.sys”, in a recent update as the cause of a global IT outage. Users can address this issue by booting Windows into Safe Mode or the Windows Recovery Environment, navigating to the C:WindowsSystem32driversCrowdStrike directory, deleting the problematic file, and then rebooting the host normally. This solution allows users to retain the Falcon Sensor update while resolving the outage. Further details and workaround steps are available on the CrowdStrike blog.

Jul 20, 2024·CNBC

A software update by cybersecurity firm CrowdStrike caused widespread IT outages across various sectors, including banking, healthcare, and air travel. Global disruptions ensued as both businesses and consumers faced significant service interruptions. The issue stemmed from a problem in CrowdStrike's Falcon product, leading to devices running Windows operating systems to crash with the "blue screen of death." The company is currently working to roll back the problematic update. Microsoft clarified that their prior cloud service outage was unrelated. While CrowdStrike announced that a fix was in progress, experts noted that the recovery process might require significant manual intervention.

Jul 20, 2024·publication

A recent CrowdStrike update caused a widespread IT outage affecting Microsoft Windows 10 and later systems, while Mac and Linux hosts remained unaffected. The issue stemmed from the CrowdStrike Falcon content update and was not due to malicious cyber activity. CrowdStrike has identified and deployed a fix for the problem. However, threat actors are exploiting the situation for phishing and other malicious activities. Organizations are urged by CISA to heighten their cybersecurity measures, remain vigilant, and ensure employees follow guidance from legitimate sources only. CISA and international cybersecurity centers continue to monitor and support remediation efforts.

Jul 20, 2024·The Wall Street Journal

CrowdStrike, a well-known cybersecurity software company, recently experienced a significant global IT outage. This disruption impacted numerous organizations relying on its services to safeguard their data and systems. The company has been working to resolve the issues and restore full functionality to its affected products. The incident underscores the critical nature of cybersecurity and the vulnerabilities even top security firms might face.

Jul 20, 2024·Wired

A global IT disruption occurred when a flawed CrowdStrike update caused Windows computers to enter an uncontrollable reboot cycle. This issue, starting with a Microsoft Azure outage followed by CrowdStrike's defective kernel driver release, impacted critical sectors such as air travel, healthcare, and emergency services. Despite CrowdStrike CEO George Kurtz's assurance that the issue was quickly isolated and resolved, the recovery process requires manual intervention on millions of affected machines worldwide. The event underscores the fragility of interconnected digital infrastructures and raises concerns about the sustainability of automatic software updates in cybersecurity.

Jul 20, 2024·wired

A faulty software update from cybersecurity firm CrowdStrike led to widespread disruptions for airports globally, affecting thousands of flights and passengers. The aviation industry, which relies heavily on intricate, automated systems for efficient operations, saw major U.S. airlines like Delta, American, and United ground flights and revert to manual processes. Consequently, over 4,000 flights were canceled and 35,500 delayed. The disruption underscored the vulnerability of the aviation ecosystem to IT failures and highlighted potential long-term effects as airlines scramble to reposition crews and aircraft.

Jul 20, 2024·wired

A wide-scale IT incident was triggered when CrowdStrike's recent update to its Falcon antivirus software caused a global system crash, critically impacting health care systems. Hospitals and doctors found themselves without essential diagnostic tools and systems, leading to the cancellation of nonurgent surgeries and procedures worldwide. Emergency services in the US and digital operations in hospitals across multiple countries, including the UK, Germany, and Israel, faced significant disruptions. The outage highlighted the heavy reliance on digital systems in modern health care and underscored the need for diversified and resilient software infrastructure to prevent such catastrophic incidents in the future.

Jul 20, 2024·Wired

Following a significant software malfunction by security firm CrowdStrike, cybercriminals are exploiting the situation by launching fraudulent websites and scams under the guise of “CrowdStrike Support.” The faulty update to CrowdStrike's Falcon monitoring platform impacted Windows computers worldwide, prompting attackers to create domains and websites aimed at deceiving affected users and IT staff. CrowdStrike has issued warnings about these scams, urging customers to only engage with official support channels and remain vigilant against phishing attempts and false recovery tools being offered by scammers.

Jul 20, 2024·Wired

A recent Cloudflare outage caused widespread disruptions, forcing many businesses to revert to cash transactions or temporarily close. This incident highlighted the vulnerability of cashless systems, particularly in Australia, where the government promotes cashless transactions. Disruptions were also noted across various sectors in India and the US, impacting services like minor league baseball games, public pools, and movie theaters. Starbucks faced significant issues, compounding the problem with a promotional event. The outages reignited discussions about the security and resilience of cloud-based infrastructures, with some experts warning about the fragility of the current systems. Despite these challenges, certain cashless businesses reported benefits such as reduced transaction times and cost savings, while others were not affected by the outage at all.

Jul 19, 2024·CNN

A global computer outage on Friday, impacting airports, banks, and other businesses, was partly attributed to a software update from US cybersecurity firm CrowdStrike. The issue stemmed from a defect in a single content update of CrowdStrike's Falcon software on Microsoft Windows operating systems. The company's engineers addressed the problem by advising customers to reboot their computers. The outage, not caused by a cyberattack, led to a 10% drop in CrowdStrike's stock in premarket trading. CrowdStrike, known for its cybersecurity services to many businesses and governmental agencies, has also been notable for investigating significant cyber incidents, including Russian interference in the 2016 US election.

Jul 19, 2024·WSJ

This article discusses the prevalence of data breaches in the health technology sector, emphasizing how many incidents are linked to fundamental cybersecurity lapses. It identifies common vulnerabilities such as unpatched software, weak passwords, and inadequate access controls. The piece underscores the critical need for health tech companies to adopt basic cybersecurity measures to protect sensitive patient data from malicious actors.

Jul 19, 2024·publication

Cisco has issued security updates addressing vulnerabilities in several of its products, including network switches, security appliances, and collaboration tools. The patches focus on mitigating risks such as privilege escalation, denial of service, and remote code execution. Users and administrators are advised to apply these updates promptly to protect systems from potential exploitation. Further details and specific instructions on the updates are available on Cisco's official website.