Want a smart insight into your inbox? Sign up for our weekly newsletters to get the only thing that is important to enterprise AI, data, and security leaders. Subscribe now
As we wrote in our preliminary analysis about the crowded strike incident, on July 19, 2024, this closure served as a reminder of the importance of cyber flexibility. Now, a year later, both The crowded strike And this industry has changed significantly, the Catalist was run for 78 minutes, which changed everything.
“The first anniversary of July 19 indicates a moment that influenced our customers and partners, and the crowd joined the most clear chapters in the history of the crowd,” said Mike Santonas, president of the mob strike. Blog The company’s long travel description of the company’s long journey towards better flexibility.
The event that shook the global infrastructure
The numbers are strictly: a faulty channel file 291 update, which is deployed to 04:09 UTC and turned only after 78 minutes, destroying 8.5 million Windows system worldwide. Insurance estimates have caused a loss of $ 5.4 billion for only 500 US companies, especially aviation, especially 5,078 flights globally.
Stephen Sherreer, Senior Vice President of Product and Portfolio Television designA proxis global company, caught why this event resonates a year later: “A year later, a crowded strike event is not just remembered, it is impossible to forget. A normal software refreshing, which has been deployed with a malicious intended intention, has been deployed in the world with only 78 minutes. Not just an internal failure. “
AI Impact Series returning to San Francisco – August 5
The next step of the AI is here – are you ready? Block, GSK, and SAP leaders include for a special look on how autonomous agents are changing enterprise workflows-from real time decision-making to end to automation.
Now secure your place – space is limited:
Its technical analysis reveals uncomfortable truths about modern infrastructure: “This is the actual waking call: even in strong ways, a stage rollout, high -speed rollback, very infrastructure introduces the dangers that can not go beyond the fastest, even faster.”
Understand what has been wrong
The basic cause of the crowded strike revealed a clash of technical failures: a matching between input fields in their IPC template type, excessive check -time array and logic error in verifying their content. These were not the edges of the edge, but the basic quality control difference.
Merit Beer, in the incoming Chief Security Officer Enkrypt AI And advisers to companies, including the end site, provide important context: “The crowded strike closure was surprised. He reminded us that even a really big, adult shops sometimes wrong the wrong action was wrong. This particular result was coincidental at some level, but it was never possible.
It is directly but fair: “If the mob Straike removed the refreshment in the sandboxes and sent it only in the encryption that it was the best process, it would have been less destructive, if it was at all.”
Nevertheless, Beer also acknowledged the crowded strike response: “The crowded strike strategy showed good executive ownership. Executives should always take ownership – this is not an internal fault. If your junior operator can make it wrong, this is our fault.”
The leadership of the leadership
George Kurtz, the founder and CEO of the mob, gave the example of the principle of ownership. A Post LinkedIn Considering the occasion of the anniversary, Kurtz wrote: “A year ago, we experienced everything that experienced everything: our technology, our actions, and the confidence kept within us – as the founder and CEO, I personally took this responsibility. I have always been and always.”
From his point of view, it turns out how the company turned the crisis into a change: “What we described was not at that moment. It was all that came forward. From the beginning, our focus was clear: based on flexibility, transparency and infinite executions, we have a strong crowd.
The crowded Strack Design enters all on a new flexibility through framework
The crowded strike reaction is focused on their flexibility through the design framework, which Cantonas has termed “quick reform or surface improvement”. Three pillars of the framework, including foundation, adaptive and permanent components, represent a comprehensive consideration on how the security platform should work.
The key implementation includes:
- Sensor self -recovery: Automatically detects a migration in crash loop and safe mode
- New material distribution system: Color -based deployment with automatic safety measures
- Better customer control: Granular update management and content pink capabilities
- Digital Operations Center: Construction facility for global infrastructure monitoring
- Falcon Super Lab: Thousands of OS, Dana and Hardware testing
Santonas stressed in his blog and said, “We didn’t just add some content setting options.” “We mainly consider how users can communicate with and control the enterprise security platforms.”
Industry wide supply chain awareness
The incident forced the vendors to do extensive calculations about the dependence of the vendors. Beer completely framed this lesson: “A great practical lesson was that your shopkeeper is part of your supply chain. Therefore, as a CISO, you should examine the risk of being aware of it, but just talking, this problem is not a joint responsibility model.”
The crowded strike closure has permanently changed the vendor’s diagnosis: “I see that, taking lessons from it, the companies they want to work and they take lessons from it as a product of business together. I will only work with the companies that I do not need to do with the currency.
Sam Curry, Siso AT Zscler, He added, “What happened to the crowded strike was unfortunate, but it could happen to many people, so we might not blame them with the interest of India. What I would say is that the world has used it to recover it again, and it is more secure, and it is more safe for the Internet.
Emphasizes the need for a new security sample
The sharire analysis extends to the basic security architecture beyond the crowded strike: “The speed on the scale comes at a price. Every routine update now weighs potential systemic failure. This means that more than testing, it means safety built for flexibility: more than you need to know more about the role of self -backed.”
His most critical insight has identified a scenario in which many people did not consider: “And when the telemetry becomes dark, you need to get rid of failure, who assume that the death may end.”
It represents a paradigm shift. As the Sherrer concluded: “Because today’s security is not just about keeping the invaders out – it is absolutely sure that your own systems never become the only point of failure.”
Waiting: AI and future challenges
Beer has already seen the next evolution emerging: “Ever since the cloud has helped us use the infrastructure as a code, but especially now that the AI is enabled us to perform security differently, I am seeing how infrastructure decisions are with humans and AI.”
The steps waiting for the future of the Hajjum Strike include:
- Hiring a chief flexible officer directly reporting to CEO
- Project climbing, detection of capabilities ahead of the kernel
- Cooperation on Windows and Point Security Platform with Microsoft
- ISO 22301 Certification for business continuity management
A strong environmental system
A year later, the change is clear. Kurtz reflects: “We are a strong company today than a year ago. Work is going on. The mission is intact. And we are moving: strong, smart and more determined than ever.”
According to his reputation, Kurtz also acknowledged those who were standing with the company: “For every customer living with us, even when it was difficult, thanks to your sustainable trust. Our incredible partners who stood with us and wrapped their sleeves, thanks to our growing family.”
The legacy of this incident is far more spread than the mob. Organizations now enforce stage -out rollouts, maintain manual -ride capabilities and – importantly when the security tools themselves may fail. The vendor relationship is newly evaluated, recognizing that in our mutual affiliated infrastructure, every component is important.
As Santonas acknowledged: “This work has not ended and will never happen. Flexibility is not a milestone. It is a discipline that requires permanent commitment and evolution.” The crowded structure of July 19, 2024, will be remembered not only for this obstacle, but also the industry towards real flexibility will also be remembered for widespread evolution.
Faced their biggest challenge, the crowded and broader security ecosystem has emerged with a deep understanding: Protecting the risks means that the guards cannot do any harm to themselves. This lesson, which is learned by 78 difficult minutes and a year change, can be the most valuable legacy of the event.
