CrowdStrike: 'Content Validator' bug let faulty update pass checks

CrowdStrike's Preliminary Post Incident Review explains that a buggy IPC Template configuration in a Rapid Response Content update bypassed the Content Validator and caused an out-of-bounds memory read that crashed an estimated 8.5 million Windows hosts on July 19, 2024; the update was reverted within an hour and CrowdStrike will implement local testing, additional validation checks, staggered/canary deployments, improved rollback and monitoring to reduce the risk of similar widespread outages.