ClosedPatched
CrowdStrike Falcon update crashes 8.5 million Windows machines
CrowdStrike Falcon sensor for Windows
A faulty CrowdStrike Falcon sensor configuration update (Channel File 291) caused a logic error that blue-screened Windows hosts running sensor 7.11 and later that were online between 04:09 and 05:27 UTC on 2024-07-19. Microsoft estimated 8.5 million Windows devices were affected CrowdStrike stressed it was not a cyberattack; it is tracked here because a security agent with kernel-level access took down machines worldwide.
Why this severity: Not an attack: faulty security update, global outage
- Started
- Jul 19, 2024
- Closed
- Aug 6, 2024
Affected
- Falcon sensor for Windows 7.11 and above, online 04:09-05:27 UTC on 2024-07-19 (CrowdStrike)
Fixed in
- Channel File 291 content reverted at 05:27 UTC; affected hosts needed manual remediation (CrowdStrike)
Updates by day4
Advisories1
News & write-ups3
Get an email when a new major security incident drops. No spam, unsubscribe any time.
