Trustwave Response: CrowdStrike Falcon Outage Update
2024-7-19 22:25:47 Author: www.trustwave.com(查看原文) 阅读量:5 收藏

Trustwave is proactively assessing and monitoring our clients who may have been impacted by CrowdStrike’s recently rolled-out update for its Windows users. The critical issue identified with CrowdStrike Falcon may result in a Blue Screen of Death (BSOD) on Windows systems, affecting systems worldwide in the travel, healthcare, finance, and telecommunications firms, according to published reports

At this time, Trustwave’s internal investigation is underway and Trustwave services are not impacted by the outages caused by CrowdStrike’s update. However, several clients have been affected. As their trusted cybersecurity partner, our teams are monitoring these situations and ensuring our clients remain safe during the recovery process. 

Trustwave’s Threat Intelligence team pointed out that threat actors may attempt to use the CrowdStrike incident for an email phishing campaign. The team recommends organizations ensure that they are communicating with CrowdStrike only through official channels. 

CrowdStrike reported the issue was not due to a cyberattack or security incident but was caused by a defect found in a single content update for CrowdStrike Falcon affecting only Windows hosts. Mac and Linux hosts are not impacted. The issue has been identified, isolated and a fix has been deployed, but those impacted have reported receiving the Blue Screen of Death, CrowdStrike said. 

Trustwave recommends impacted organizations take the steps CrowdStrike has provided as a workaround to resolve the BSOD issue on affected machines: 

  1. Boot Windows into Safe Mode or the Windows Recovery Environment.
  2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory.
  3. Locate the file matching ‘C-0000029*.sys’ and delete it.
  4. Boot the host normally. 

Trustwave will continue to monitor this developing situation, and we remain on standby for our clients and to provide further feedback on these steps if more information becomes available.   

Latest Trustwave Blogs

Trustwave Webinar: Accelerating Value for Microsoft MXDR, Copilot, Sentinel

The unparalleled capabilities encapsulated within Microsoft MXDR, Copilot, and Sentinel can be powerful when an organization knows how to expertly tap into these resources. The knowledge to gain full...

Read More

Trustwave Named in 2024 Gartner® Market Guide for Managed Detection and Response (MDR)

For the second consecutive year, Trustwave has been named a Representative Vendor in the 2024 Gartner® Market Guide for Managed Detection and Response.

Read More

6 Steps on How to Respond to a Data Breach Before it Ruins Your Business

Too many consumers have awoken one morning to find messages from a retailer or their bank detailing purchases made through their account of which they were unaware. While the realization that they...

Read More


文章来源: https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/trustwave-response-crowdstrike-falcon-outage-update/
如有侵权请联系:admin#unsafe.sh