Statement on Falcon Content Update for Windows Hosts
Update for Windows Hosts
CrowdStrike Falcon Sensor Update Causing Windows Crashes: Everything You Need to Know (July 19, 2024 Update)
Hey everyone, there's been a bit of a bump in the road with CrowdStrike's Falcon Sensor lately, specifically for Windows users. Let's break down what happened, what's fixed, and what you can do if your system is affected.
What Went Wrong?
A recent CrowdStrike update on July 19, 2024, accidentally caused some Windows machines to experience Blue Screen of Death (BSOD) crashes. This wasn't a security issue – more like a misstep. The good news is CrowdStrike identified the problem quickly and took action.
Who's Impacted?
Only Windows hosts running the Falcon Sensor are at risk. Macs and Linux machines are safe. If your Windows system hasn't crashed yet, and the update occurred after 5:27 UTC on July 19, 2024, you're likely in the clear.
Fixing Your Crashed System (Important Note)
If your Windows machine keeps crashing after the update, there are a few ways to fix it. We'll cover both individual systems and virtual environments (cloud servers).
Important Note: This information is for informational purposes only. Attempting these fixes yourself might be risky. Always consult a qualified IT professional if you're unsure about any steps.
Official Resources from CrowdStrike
Here's what CrowdStrike recommends:
- Official CrowdStrike Statement:
https://www.crowdstrike.com/products/faq/ - Technical Alert with Workaround Steps:
https://www.crowdstrike.com/products/faq/
Frequently Asked Questions (FAQ)
- Is this a security threat? No, this was an update issue, not a security breach.
- Will my computer automatically fix itself? Most Windows machines that haven't crashed yet will download a fix automatically. If not, you might need to follow the manual steps in the CrowdStrike Technical Alert (
https://www.crowdstrike.com/products/faq/ - What if I'm not comfortable doing these fixes myself? Contact CrowdStrike support or a trusted IT professional for help. CrowdStrike recommends organizations ensure they're communicating with CrowdStrike representatives through official channels.
Disclaimer and Additional Resources
I'm providing this information as a general overview. The specific steps may vary depending on your system configuration. Always refer to official CrowdStrike documentation for the most up-to-date instructions:
Here are some additional resources that might be helpful:
- Bitlocker recovery in Microsoft Azure:
https://learn.microsoft.com/en-us/answers/questions/530500/how-to-get-bitlocker-recovery-key-from-azure-porta - BitLocker recovery in Microsoft environments using SCCM:
https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/bitlocker/recovery-service - BitLocker recovery in Microsoft environments using Active Directory and GPOs:
https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/configure - BitLocker recovery in Microsoft environments using Ivanti Endpoint Manager:
https://forums.ivanti.com/s/article/Updates-in-Endpoint-Manager-2020-1-for-BitLocker
Thanks.
Post a Comment