Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedCriticalPatched

Day · Aug 6, 2024

CrowdStrike Falcon update crashes 8.5 million Windows machines

CrowdStrike Falcon sensor for Windows

Follow this incident

Updates on Aug 6, 2024

  1. CrowdStrike publishes the Channel File 291 root cause analysis

    Source

Summary

A faulty CrowdStrike Falcon sensor configuration update (Channel File 291) caused a logic error that blue-screened Windows hosts running sensor 7.11 and later that were online between 04:09 and 05:27 UTC on 2024-07-19. Microsoft estimated 8.5 million Windows devices were affected CrowdStrike stressed it was not a cyberattack; it is tracked here because a security agent with kernel-level access took down machines worldwide.

Read the full incident →

Advisories1