Fri.Jul 19, 2024

article thumbnail

Global Microsoft Meltdown Tied to Bad Crowdstrike Update

Krebs on Security

A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online. Crowdstrike said a fix has been deployed, but experts say the recovery from this outage could take some time, as Crowdstrike’s solution needs to be applied manually on a per-machine basis.

article thumbnail

Wanted! An IG Code of Human Ethics

Weissman's World

I recently gave a presentation to ARMA International about the human consequences of what we do, and though you probably can get a copy of it from ARMA itself – and for sure you can from me – I wanted to take a minute to reinforce the criticality of my point. Most of us spend… Read More » Wanted! An IG Code of Human Ethics The post Wanted!

IT 290
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Banks and Airlines Disrupted as Mass Outage Hits Windows PCs

Data Breach Today

CrowdStrike Confirms Faulty Software Update for Falcon Sensor, Is Deploying Fix Banks, airlines, media giants and others are being disrupted by a mass, global IT outage tied to Windows PCs. While CrowdStrike has issued a workaround tied to a Falcon software update that appears to be the culprit, many IT administrators say it so far remains difficult to implement at scale.

IT 306
article thumbnail

How One Bad CrowdStrike Update Crashed the World’s Computers

WIRED Threat Level

A defective CrowdStrike kernel driver sent computers around the globe into a reboot death spiral, taking down air travel, hospitals, banks, and more with it. Here’s how that’s possible.

IT 145
article thumbnail

Optimizing The Modern Developer Experience with Coder

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

article thumbnail

CrowdStrike, Microsoft Outage Uncovers Big Resiliency Issues

Data Breach Today

In the Spotlight: Quality Assurance, Business Resilience, Single Points of Failure Expect the global IT disruptions caused by a bug in CrowdStrike's software to prompt quality assurance questions for the cybersecurity vendor. Experts say the incident also highlights shortcomings in the Windows operating system, as well as many organizations' business resiliency plans.

More Trending

article thumbnail

Ransomware Remains a Major Threat to Energy

Data Breach Today

Median Ransomware Attack Recovery Cost for Critical Infrastructure Is 4X Higher Ransomware remains a major threat to energy, oil/gas and utilities organizations of all sizes around the globe. Our 2024 state of ransomware report reveals that the median recovery costs for two critical infrastructure sectors - energy and water - quadrupled to $3 million over the past year.

article thumbnail

CrowdStrike update epic fail crashed Windows systems worldwide

Security Affairs

Windows machines worldwide displayed BSoD screen following a faulty update pushed out by cybersecurity firm CrowdStrike. A faulty update released by CrowdStrike Falcon is causing Windows systems to display a BSoD screen. The incident is causing widespread global disruptions, impacting critical infrastructure such as airports, hospitals, and TV stations.

article thumbnail

Federal Agencies Scramble to Fix Massive Software Outage

Data Breach Today

CrowdStrike Outage Rekindles Concerns Over Federal Cybersecurity Contingency Plans Federal agencies including CISA rushed on Friday to provide IT support to critical infrastructure sectors in the U.S. while resolving their own system disruptions caused by a faulty update pushed to Windows PCs by the Texas-based cybersecurity firm CrowdStrike.

article thumbnail

Huge Microsoft Outage Linked to CrowdStrike Takes Down Computers Around the World

WIRED Threat Level

A software update from cybersecurity company CrowdStrike appears to have inadvertently disrupted IT systems globally.

article thumbnail

15 Modern Use Cases for Enterprise Business Intelligence

Large enterprises face unique challenges in optimizing their Business Intelligence (BI) output due to the sheer scale and complexity of their operations. Unlike smaller organizations, where basic BI features and simple dashboards might suffice, enterprises must manage vast amounts of data from diverse sources. What are the top modern BI use cases for enterprise businesses to help you get a leg up on the competition?

article thumbnail

CrowdStrike/Microsoft Outage Latest Blow to Healthcare

Data Breach Today

Some EHRs Affected; Hospitals Cancel Patient Care in Latest Vendor Mega Incident As if the healthcare sector doesn't have enough technology problems, the global IT outage caused by a faulty CrowdStrike software update has forced some hospitals and other medical facilities worldwide to resort to manual downtime procedures and cancel patient procedures.

IT 162
article thumbnail

CrowdStrike Phishing Attacks Appear in Record Time

KnowBe4

I have been the CEO of an anti-virus software developer. We had a special acronym for catastrophic events like this, a so-called "CEE". As in Company Extinction Event. Within hours of mass IT outages on Friday, a surge of new domains began appearing online, all sharing one common factor: the name CrowdStrike. As the company grapples with a global tech outage that has delayed flights and disrupted emergency services, opportunistic cybercriminals are quick to exploit the chaos.

Phishing 119
article thumbnail

ISMG Editors: AT&T's Ransom Payment in Snowflake Breach

Data Breach Today

Also: AI Bots in the Workplace; AI Regulations in the US and EU In the latest weekly update, ISMG editors discussed AT&T's alleged ransom payment to hackers following a breach of its Snowflake account, the challenges of using AI bots in the workplace, and the impact of differences in AI regulations in the E.U. and the U.S.

IT 162
article thumbnail

MediSecure data breach impacted 12.9 million individuals

Security Affairs

Personal and health information of 12.9 million individuals was exposed in a ransomware attack on Australian digital prescription services provider MediSecure. MediSecure is a company that provides digital health solutions, particularly focusing on secure electronic prescription delivery services in Australia. In May, the company was forced to shut down its website and phone lines following a cyber attack, but it did not mention a ransomware attack.

article thumbnail

The Cloud Development Environment Adoption Report

Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.

article thumbnail

Securing Healthcare: Minimizing Risk in an Ever-Changing Threat Landscape

Data Breach Today

Securing Healthcare, Minimizing Risk, Ever-Changing Threat Landscape.

Risk 162
article thumbnail

Don't Fall for CrowdStrike Outage Scams

WIRED Threat Level

Swindlers are spinning up bogus websites in an attempt to dupe people with “CrowdStrike support” scams following the security firm's catastrophic software update.

Security 116
article thumbnail

The Cost of Underpreparedness to Your Business

Data Breach Today

The Cost of Underpreparedness to Your Business.

Security 162
article thumbnail

Cisco fixed a critical flaw in Security Email Gateway that could allow attackers to add root users

Security Affairs

Cisco has addressed a critical vulnerability that could allow attackers to add new root users to Security Email Gateway (SEG) appliances. Cisco fixed a critical vulnerability, tracked as CVE-2024-20401 (CVSS score 9.8), that could allow unauthenticated, remote attackers to add new users with root privileges and permanently crash Security Email Gateway (SEG) appliances.

Security 126
article thumbnail

The Tumultuous IT Landscape Is Making Hiring More Difficult

After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!

article thumbnail

Brett Solomon on Digital Rights

Schneier on Security

Brett Solomon is retiring from AccessNow after fifteen years as its Executive Director. He’s written a blog post about what he’s learned and what comes next.

IT 102
article thumbnail

Measuring Your Data’s Risk

Data Breach Today

Measuring Your Data’s Risk.

Risk 162
article thumbnail

78% of Organizations Are Targets of Ransomware Attacks Two or More Times in Twelve Months

KnowBe4

New data puts the spotlight on the frequency and impact of modern ransomware attacks, highlighting the overconfidence organizations are showing in their ability to defend and respond to attacks.

article thumbnail

Samsung halts sales of Galaxy Buds 3 Pro because of quality problems

Collaboration 2.0

Just a week after the wearable's Unpacked launch, multiple customers reported issues with the earbud tips tearing - and Samsung has pulled the devices from shelves.

Sales 98
article thumbnail

Introducing CDEs to Your Enterprise

Explore how enterprises can enhance developer productivity and onboarding by adopting self-hosted Cloud Development Environments (CDEs). This whitepaper highlights the simplicity and flexibility of cloud-based development over traditional setups, demonstrating how large teams can leverage economies of scale to boost efficiency and developer satisfaction.

article thumbnail

CrowdStrike update epic fail crashed Windows systems worldwide

Security Affairs

Windows machines worldwide displayed BSoD screen following a faulty update pushed out by cybersecurity firm CrowdStrike. A faulty update released by CrowdStrike Falcon is causing Windows systems to display a BSoD screen. The incident is causing widespread global disruptions, impacting critical infrastructure such as airports, hospitals, and TV stations.

article thumbnail

This ultra-thin power bank is a must-have travel gadget

Collaboration 2.0

The Auskang 5,000mAh power bank is only about as thick as a few credit cards, but it has enough power to reliably charge your smartphone or other USB-C device.

IT 97
article thumbnail

MediSecure data breach impacted 12.9 million individuals

Security Affairs

Personal and health information of 12.9 million individuals was exposed in a ransomware attack on Australian digital prescription services provider MediSecure. MediSecure is a company that provides digital health solutions, particularly focusing on secure electronic prescription delivery services in Australia. In May, the company was forced to shut down its website and phone lines following a cyber attack, but it did not mention a ransomware attack.

article thumbnail

This iPhone thermal camera accessory is one of my favorite tools

Collaboration 2.0

The industrial-grade Topdon TC002 gives your iPhone a cool superpower and you can get it for much less than a dedicated thermal imaging camera.

IT 98
article thumbnail

Improving the Accuracy of Generative AI Systems: A Structured Approach

Speaker: Anindo Banerjea, CTO at Civio & Tony Karrer, CTO at Aggregage

When developing a Gen AI application, one of the most significant challenges is improving accuracy. This can be especially difficult when working with a large data corpus, and as the complexity of the task increases. The number of use cases/corner cases that the system is expected to handle essentially explodes. 💥 Anindo Banerjea is here to showcase his significant experience building AI/ML SaaS applications as he walks us through the current problems his company, Civio, is solving.

article thumbnail

Russian nationals plead guilty to participating in the LockBit ransomware group

Security Affairs

Two Russian nationals pleaded guilty to participating in the LockBit ransomware group and carrying out attacks against victims worldwide. Two foreign nationals, Ruslan Magomedovich Astamirov and Mikhail Vasiliev, pleaded guilty in Newark federal court for their roles in the LockBit ransomware operation. The LockBit ransomware operation has been active since January 2020, the group hit over 2,500 victims across 120 countries, including 1,800 in the U.S.

article thumbnail

CISA’s Red Team Exercise Shows Value of Phishing, but Misses the Best Recommendation

KnowBe4

Phishing is used to completely compromise the victim’s environment after other repeated methods failed.

Phishing 114
article thumbnail

Grab a portable LG speaker for up to 40% off right now

Collaboration 2.0

LG's Black Friday in July sale is happening now, and you can save up to $200 on LG speakers, earbuds, and more.

Sales 98