CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft

Comments

• gravitas_deficiency@sh.itjust.works ⁨1⁩ ⁨month⁩ ago

  I feel like that’s not even close to what the real number is, considering the impact it had.

  source

  • Godort@lemm.ee ⁨1⁩ ⁨month⁩ ago

    If this figure is accurate, the massive impact was likely due to collateral damages. If this took down every server at an enterprise and left most of the workstations online, then that still means that those workstations were basically paperweights.

    source
  • Sami@lemmy.zip ⁨1⁩ ⁨month⁩ ago

    They have about 24,000 clients so that comes out at around 350 impacted machines per client which is reasonable. It only takes a few impacted machines for thousands of people to be impacted if they are important enough.

    source
  • SchmidtGenetics@lemmy.world ⁨1⁩ ⁨month⁩ ago

    My bothers work uses VMs so if the server is down there’s probably 50k computers right there.

    source

    • gravitas_deficiency@sh.itjust.works ⁨1⁩ ⁨month⁩ ago

      As far as I know, none of the OSes used for virtualization hosts at scale by any of the major cloud infra players are Windows.

      Not to mention: any company that uses any AWS or azure or GCP service is “using VMs” in one form or another (yes, I know I am hand waving away the difference between VMs and containers). It’s basically what they build all of their other services on.

      source

      • -> View More Comments
  • biscuitswalrus@aussie.zone ⁨1⁩ ⁨month⁩ ago

    That’s how supply chains work. A link in the chain is broken, the whole thing doesn’t work. Also 10% of major companies being affected, is still giant. But you’re here using online services, probably still buying bread probably got fuel, probably playing video games. It’s huge in the media, and it saw massive affects but there’s heaps of things that just weren’t even touched that information spread on. Like TV news networks seemingly kept going enough to report on it non stop unaffected. Tbh though any good continuity and disaster recovery plan should handle this with impact but continuity.

    source

    • remotelove@lemmy.ca ⁨1⁩ ⁨month⁩ ago

      The only companies I have seen with workable BCDR plans are banks, and that is because they handle money for rich people. It wouldn’t surprise me if many core banking systems are hyper-legacy as well.

      I honestly think that a majority of our infrastructure didn’t collapse because of the lack of security controls and shitty patch management programs.

      Sure. Compliance programs work for some aspects of business but since the advent of “the cloud”, BCDR plans have been a paperwork drill.

      (There are probably some awesome places out there with quadruple-redunant networks with the ability to outlast a nuclear winter. I personally haven’t seen them though.)

      source

      • -> View More Comments
  • ByteOnBikes@slrpnk.net ⁨1⁩ ⁨month⁩ ago

    I wonder if a large percentage of impact is internal facing systems.

    And we won’t know until Monday.

    source
• DogPeePoo@lemm.ee ⁨1⁩ ⁨month⁩ ago

  Crowd strike lives up to its name

  source
• Canopyflyer@lemmy.world ⁨1⁩ ⁨month⁩ ago

  Hey Cloudstrike…

  That’s not imposter syndrome you’re feeling right now.

  source

  • possiblylinux127@lemmy.zip ⁨1⁩ ⁨month⁩ ago

    *crowdstrike

    source

    • Canopyflyer@lemmy.world ⁨1⁩ ⁨month⁩ ago

      It’s not imposter syndrome for me either. At least I didn’t bring down millions of systems all across the world

      source

      • -> View More Comments
• unfnknblvbl@beehaw.org ⁨1⁩ ⁨month⁩ ago

  This number seems quite low. My organisation alone would have had something like 3000 employee devices taken down. Since it happened on a day where most people WFH, there’s at least another thousand static devices in my building alone that may not have been in use at the time that will shit the bed tomorrow morning.

  The same thing applies to our much larger sister companies interstate. So that’s another 6,000 or so devices.

  The two largest energy retailers were affected too, so that’s another 5,000 devices at a conservative estimate.

  Then there’s all the self-service checkouts that went down across Australia. I have no idea how many there are, but if every Coles and Woolworths has ten of them, that’s another ~40,000 devices.

  That’s just the organisations that I am personally aware of as being affected in Australia and can get ballpark figures for.

  Obviously Microsoft are getting their figures from the auto-reportimg that happened on each crash, not it really does seem like it’s too low.

  It’s beyond time to diversify our IT infrastructure. Enough with sticking everything “in the cloud” and paying for software (and devices!!) we don’t own.

  source

  • Chozo@fedia.io ⁨1⁩ ⁨month⁩ ago

    So, those numbers all account for about 54,000 of the 8.5 million devices. Using fairly generous of rounding, that still leaves approximately 8.5 million more devices.

    A million is a lot.

    source

    • unfnknblvbl@beehaw.org ⁨1⁩ ⁨month⁩ ago

      Way to miss the point. That’s 54,000 that one person knows of across a small handful of organisations in one small country. I’m not even including the dozens more organisations I know were affected but can’t come up with a ballpark figure for.

      source
• Irremarkable@fedia.io ⁨1⁩ ⁨month⁩ ago

  Yknow I almost majored in IT. Real glad I didn't right now. And most other times, bur especially right now.

  source

  • buddascrayon@lemmy.world ⁨1⁩ ⁨month⁩ ago

    If you had majored in IT you would know that this Crowdstrike thing is an easy, though somewhat tedious, fix. There’s honestly far more annoying problems that IT people have to content with.

    source

    • Irremarkable@fedia.io ⁨1⁩ ⁨month⁩ ago

      I'm well aware that it's not a complicated fix, I'm more than capable of doing it. Being a guy on an understaffed IT team in an office of hundreds right now sounds fucking miserable.

      source

      • -> View More Comments
    • whoisearth@lemmy.ca ⁨1⁩ ⁨month⁩ ago

      Like justifying staffing and budgets. Fuck office politics.

      source
• Greyghoster@aussie.zone ⁨1⁩ ⁨month⁩ ago

  How many systems in the world’s military went down, you know in war machines of Russia and Israel and Ukraine?

  source

  • Avg@lemm.ee ⁨1⁩ ⁨month⁩ ago

    Those computers don’t have auto update enabled

    source

    • lemming741@lemmy.world ⁨1⁩ ⁨month⁩ ago

      CrowdStrike’s channel file updates were pushed to computers regardless of any settings meant to prevent such automatic updates, Wardle noted.

      x.com/patrickwardle/status/1814367918425079934

      source

      • -> View More Comments
    • Greyghoster@aussie.zone ⁨1⁩ ⁨month⁩ ago

      Normally I would agree however this doesn’t appear to be a Microsoft update but a CrowdStrike update. Given that everyone is worried about ransomware etc.

      source
    • remotelove@lemmy.ca ⁨1⁩ ⁨month⁩ ago

      Absolutely that. For networks that matter, patches are usually tested independently. While I wouldn’t trust the average military command to do patch testing, any civilian contractors absolutely would, because money. (Microsoft is likely at the top of that stack…)

      There are other conditions as well. EDR infrastructure, if it exists, would need to be isolated on a “Government cloud” which is a different beast completely. Plus, there are different levels of networks, some being air-gapped.

      source