Interesting, so apparently the #CTO of #Cloudstrike is #GeorgeKurtz, the same CTO who oversaw the fiasco about 10 years ago when #McAfee #antivirus was falsely flagging a crucial system file within #Windows, and apparently he had been bragging about just how fast they were getting these updates out... Despite the fact that the updates in question included code that ran inside of kernel space at startup, meaning if they didn't run properly on any system that system would crash before it could even get to the login screen.

So clearly we know that there was some bad management involved, and while it was definitely not the fault of just one person, this offers us some insight into what the #management problem was: a focus on speed over carefulness, in a situation where a broad range of critical infrastructure could be crashed if a mistake was made.

"Move fast and break things" indeed...

https://cxotoday.com/news-analysis/microsoft-cloudstrike-lessons-from-history/

#InfoSec #Cybersec #CyberSecurity #MoveFastAndBreakThings

That pretty much covers it

#crowdstrike
#CrowdStrikepocalypse
#GeorgeKurtz
#ShamelesslyStolenFromTheOtherSite

Crowdstrike: Son, we live in a world that has threats, and those threats have to be defeated by men with EDR. Who's gonna do it? You? You, Windows Defender?

I have a greater responsibility than you can possibly fathom. You weep for the OS, and you curse the Falcon EDR. You have that luxury. You have the luxury of not knowing what I know -- that the OS's death, while tragic, probably saved lives; and my existence, while grotesque and incomprehensible to you, saves lives.

You don't want the truth because deep down in places you don't talk about at parties, you want me on that wall -- you need me on that wall.
We use words like "APTs," "threat actor," "TTPs." We use these words as the backbone of a life spent defending something. You use them as a punch line.

I have neither the time nor the inclination to explain myself to a man who rises and sleeps under the blanket of the very functionality that I provide and then questions the manner in which I provide it.

I would rather that you just said "thank you" and went on your way. Otherwise, I suggest you pick up a console and stand the post. Either way, I don't give a DAMN what you think you're entitled to!

Microsoft: Did you order the Blue Screen

Crowdstrike: I did the job --

Microsoft: -- Did you order the Blue Screen?!

Crowdstrike: YOU'RE GOD DAMN RIGHT I DID!!!

#crowdstrike
#CrowdStrikepocalypse
#GeorgeKurtz

Ouch. And they quoted his extraordinarily tone deaf tweet.

https://homeland.house.gov/wp-content/uploads/2024/07/CrowdStrike-Software-Update-Letter_FINAL.pdf

#crowdstrike
#CrowdStrikepocalypse
#GeorgeKurtz

Kind of botched that last one - here's one with at least a little better grammar.

#crowdstrike
#CrowdStrikepocalypse
#GeorgeKurtz