logo

Security Alert: CrowdStrike Windows Outage

ID: a9cab78c-0dd8-5eaa-971d-f0f81d5388f4

STIX ID: report--a9cab78c-0dd8-5eaa-971d-f0f81d5388f4

Feed Name: Expel Blog

Date Published: 2024-07-19

Date Updated: 2026-04-27

Author: Greg Notch

...
...

**Executive summary:** A faulty CrowdStrike Falcon Sensor update (a malformed channel file, identified as C-00000291*.sys with a 04:09 UTC timestamp) caused Windows hosts worldwide to crash to a Blue Screen of Death. CrowdStrike has deployed a fix and does not consider this a security incident, but recovery is largely manual for affected machines; unimpacted hosts include those brought online after 05:27 UTC or those with the reverted channel file. Organizations should apply the provided remediation steps and be alert for opportunistic phishing or newly created typosquat domains taking advantage of the outage.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.