Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedCriticalPatched

Day · Jul 19, 2024

CrowdStrike Falcon update crashes 8.5 million Windows machines

CrowdStrike Falcon sensor for Windows

Follow this incident

Updates on Jul 19, 2024

  1. 04:09 UTC: CrowdStrike pushes the Channel File 291 update; Windows hosts crash

    Source
  2. 05:27 UTC: the faulty update is remediated

    Source

Summary

A faulty CrowdStrike Falcon sensor configuration update (Channel File 291) caused a logic error that blue-screened Windows hosts running sensor 7.11 and later that were online between 04:09 and 05:27 UTC on 2024-07-19. Microsoft estimated 8.5 million Windows devices were affected CrowdStrike stressed it was not a cyberattack; it is tracked here because a security agent with kernel-level access took down machines worldwide.

Read the full incident →

Advisories1