CrowdStrike blames a test software bug for that giant global mess it made

CrowdStrike’s preliminary post-incident review attributes last week’s mass Windows crashes to a faulty Falcon Sensor rapid-response content update that passed a flawed validator and caused an out-of-bounds read in the Windows driver, crashing roughly 8.5 million systems. The vendor outlines planned mitigations—including more rigorous testing, staggered rollouts, enhanced customer control over deployment, and release notes—and promises a full root-cause analysis once the investigation concludes.