CrowdStrike Falcon update crashes 8.5 million Windows machines
Teaser from the source
A faulty CrowdStrike Falcon sensor configuration update (Channel File 291) caused a logic error that blue-screened Windows hosts running sensor 7.11 and later that were online between 04:09 and 05:27 UTC on 2024-07-19. Microsoft estimated 8.5 million Windows devices were affected CrowdStrike stressed it was not a cyberattack; it is tracked here because a security agent with kernel-level access took down machines worldwide.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on CrowdStrike
Other advisories
- Not ratedosv:CVE-2026-103056AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR
- HighCVE-2026-40058CrowdStrike Falcon sensor for Windows: TOCTOU-Race-Condition
- HighCVE-2026-40058CrowdStrike hat ein Sicherheitsupdate veröffentlicht, um eine Schwachstelle im Falcon-Sensor für Windows zu beheben.
- MediumCVE-2026-76380Splunk CrowdStrike OAuth API app for Splunk SOAR: Klartextspeicherung vertraulicher Informationen
- CriticalCVE-2026-40050CrowdStrike LogScale Self-Hosted: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-40050CrowdStrike LogScale Self-Hosted: Pfadüberschreitung (Path Traversal)
- Not ratedosv:MAL-2025-48991Malicious code in crowdstrike (npm)
- MediumCVE-2025-37728Kibana Insufficiently Protected Credentials in the CrowdStrike Connector
Other news entries
- Warp says attackers exploited a vendor in its infrastructure and accessed agent trace and telemetry dataBreachpwn.watch
- Bullhorn sees red after cyberattack knocks recruitment platform offlineNewsThe Register — Security
- ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial FirmsNewsThe Hacker News
- 123 Reg: "AI-driven cyberattack" exposed customer contact and account data; registrar suspects a China-nexus actorBreachpwn.watch
- Slim Spider Steals Crypto Custody Secrets From Brazilian Financial InstitutionNewsThe Hacker News
- Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day ExploitsNewsSecurityWeek
- New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privilegesNewsBleepingComputer
- Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoCNewsThe Register — Security
Source: https://pwn.watch/i/crowdstrike-falcon-channel-file-291-outage
ID