Initial Alert (11:30 a.m., EDT, July 19, 2024):

CISA is aware of the widespread outage affecting Microsoft Windows hosts due to an issue with a recent CrowdStrike update and is working closely with CrowdStrike and federal, state, local, tribal and territorial (SLTT) partners, as well as critical infrastructure and international partners to assess impacts and support remediation efforts. CrowdStrike has confirmed the outage:

- Impacts Windows 10 and later systems.
- Does not impact Mac and Linux hosts.
- Is due to the CrowdStrike Falcon content update and not to malicious cyber activity.

According to CrowdStrike, the issue has been identified, isolated and a fix has been deployed. CrowdStrike customer organizations should reference CrowdStrike guidance and their customer portal to resolve the issue.

Of note, CISA has observed threat actors taking advantage of this incident for phishing and other malicious activity. CISA urges organizations and individuals to remain vigilant and only follow instructions from legitimate sources. CISA recommends organizations to remind their employees to avoid clicking on phishing emails or suspicious links.

Update 12:30 p.m., EDT, July 20, 2024:

- CrowdStrike continues to provide updated guidance on yesterday’s widespread IT outage, including remediation steps for specific environments.
- CrowdStrike released technical details that provide:
    -- A technical summary of the outage and the impact.
    -- Information on how the update to the CrowdStrike Falcon sensor configuration file, Channel File 291, caused the logic error that led to the outage.
    -- A discussion of the root cause analysis CrowdStrike is undertaking to determine how the logic error occurred.
- Cyber threat actors continue to leverage the outage to conduct malicious activity, including phishing attempts. CISA continues to work closely with CrowdStrike and other private sector and government partners to actively monitor any emerging malicious activity.
    -- According to a new CrowdStrike blog, threat actors have been distributing a malicious ZIP archive file. This activity appears to be targeting Latin America-based CrowdStrike customers. The blog provides indicators of compromise and recommendations.

Security experts said CrowdStrike's routine update of its widely used
cybersecurity software, which caused clients' computer systems to crash
globally on Friday, apparently did not undergo adequate quality checks
before it was deployed.

The latest version of its Falcon sensor software was meant to make
CrowdStrike clients' systems more secure against hacking by updating
the threats it defends against. But faulty code in the update files resulted
in one of the most widespread tech outages in recent years for companies
using Microsoft's Windows operating system.

Global banks, airlines, hospitals and government offices were disrupted.
CrowdStrike released information to fix affected systems, but experts said
getting them back online would take time as it required manually weeding
out the flawed code.

Owned by Blackrock, same company that had the Trump shooter in one of their commercials.

people already speculating that the outage may have deleted the cell phone records of the shooter's movements...
 

people already speculating that the outage may have deleted the cell phone records of the shooter's movements...
 

people already speculating that the outage may have deleted the cell phone records of the shooter's movements...
 

"So let me see if I have this Crowdstrike story straight….

When Hillary Clinton was Sec. of State, she was illegally funneling sophisticated weapons through Libya to terrorists in the MidEast in an effort to take out Assad in Syria for Israel. When the weapons transfer went sideways and the US Ambassador was killed in Benghazi, it was discovered she was using an illegal private server for secret communications. She destroyed the server, but not before its contents were leaked by Wikileaks, including communications about bizarre occult rituals and inexplicable code words involving children and pizza. Instead of investigating the leak themselves, the FBI relied on a Crowdstrike investigation that falsely claimed the server was hacked by Russia. The FBI cleared HC despite admitting she broke the law, and launched the Russiagate investigation, using more fake Clinton campaign disinfo to tie Trump to Russia to get a FISA warrant and spy on Trump while leaking dirt to the press to undermine first his campaign, then his presidency. When Trump had a call with Zelenskyy and asked about Crowdstrike, a “whistleblower” falsely claimed quid-pro-quo and launched the first impeachment to stop Trump’s inquiries. (It was in the midst of this impeachment trial, btw, when Event 201 took place. But that’s another story.) Fast forward to 2024 and Trump is dominating Biden when he miraculously survives a deep state orchestrated assassination attempt two days before the RNC. Two days later Crowdstrike causes the biggest computer network crash in all of history, knocking millions of corporate and government systems offline for hours.

Other than the fact that Blackrock owns Crowdstrike and a Blackrock affiliated investment firm placed millions of dollars betting against DJT in the hours before the assassination attempt by a shooter who was featured in a Blackrock promo, did I miss anything?"

https://threadreaderapp.com/thread/1814863467901223360.html