CrowdStrike
Security incidents tagged CrowdStrike. Newest first.
0 CrowdStrike incidents in the last 12 months
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 394
- Longest quiet run: 403 days (Aug 7–Sep 13)
Show 2 older incidents2 older incidents
September 2025 1
- CriticalPatched
Shai-Hulud: first self-replicating npm worm hits 500+ packages incl. @ctrl/tinycolor and CrowdStrike
A worm spread through npm by stealing maintainers' npm and GitHub tokens with TruffleHog, then republishing their packages with a malicious bundle.js postinstall. It created shai-hulud GitHub workflows to exfiltrate secrets and made private repos public. CISA counted more than 500 affected packages, including @ctrl/tinycolor and several @crowdstrike packages.
npm packages (@ctrl/tinycolor, @crowdstrike/*, 500+ others)Closed Sep 23, 2025
July 2024 1
- CriticalPatched
CrowdStrike Falcon update crashes 8.5 million Windows machines
A faulty CrowdStrike Falcon sensor configuration update (Channel File 291) caused a logic error that blue-screened Windows hosts running sensor 7.11 and later that were online between 04:09 and 05:27 UTC on 2024-07-19. Microsoft estimated 8.5 million Windows devices were affected CrowdStrike stressed it was not a cyberattack; it is tracked here because a security agent with kernel-level access took down machines worldwide.
CrowdStrike Falcon sensor for WindowsClosed Aug 6, 2024
