CrowdStrike apologizes to Congress for 'perfect storm' that caused global IT outage

CrowdStrike apologized before a U.S. House cybersecurity subcommittee for a flawed Falcon threat-detection content update that crashed Windows machines globally, disrupting airlines, hospitals, and emergency services; the firm cited a mismatch between input parameters and predefined rules and pledged stricter quality checks and phased rollouts. Lawmakers probed the risks of kernel-level access for security tools, with Trellix warning that frequent kernel updates are inherently riskier and Microsoft considering moving more protections to user mode, while tampering by groups like Scattered Spider was cited as a reason vendors seek deep OS visibility.