CrowdStrike - Security Ticks

Microsoft releases tool to speed up recovery of systems borked by CrowdStrike update

CrowdStrike, Don't miss, Hot stuff, Microsoft, News, Orca Security, phishing, tech support scam, Trend Micro, virtualization, Windows, Windows Server / SecurityTicks

Microsoft releases tool to speed up recovery of systems borked by CrowdStrike update 2024-07-22 at 15:16 By Zeljka Zorz By now, most people are aware of – or have been personally affected by – the largest IT outage the world have ever witnessed, courtesy of a defective update for Crowdstrike Falcon Sensors that threw Windows […]

React to this headline:

Microsoft releases tool to speed up recovery of systems borked by CrowdStrike update Read More »

CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams

CrowdStrike, Malware, Malware & Threats, phishing, scam / SecurityTicks

CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams 2024-07-22 at 13:47 By Eduard Kovacs The major IT outage caused by CrowdStrike is being leveraged by threat actors for phishing, scams, and malware delivery. The post CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams Read More »

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool

CrowdStrike, Endpoint Security, Featured, Incident Response, Microsoft, outage, tool / SecurityTicks

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool 2024-07-21 at 16:31 By Mike Lennon Microsoft says roughly 8.5 million Windows devices were impacted by the faulty software update from CrowdStrike, and published a tool to help admins through the recovery process. The post Microsoft Says 8.5 Million Windows Devices Impacted

React to this headline:

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool Read More »

Threat Actors Exploit Recent CrowdStrike Outage to Ramp Up Suspicious Domain Creation

CrowdStrike, Malware, Threat Actor, Windows / SecurityTicks

Threat Actors Exploit Recent CrowdStrike Outage to Ramp Up Suspicious Domain Creation 2024-07-20 at 19:46 By dakshsharma16 On July 19th, 2024, CrowdStrike, a leading cybersecurity provider of advanced end-point security detection and protection solutions, released a sensor configuration update to Windows systems. This update contained a logic error that resulted in system crashes and Blue

React to this headline:

Threat Actors Exploit Recent CrowdStrike Outage to Ramp Up Suspicious Domain Creation Read More »

CrowdStrike Provides Remediation Guidance After Software Update Causes Worldwide IT Chaos

CrowdStrike, Featured, Incident Response, outage, Windows / SecurityTicks

CrowdStrike Provides Remediation Guidance After Software Update Causes Worldwide IT Chaos 2024-07-20 at 17:01 By Mike Lennon CrowdStrike on Saturday provided technical information and remediation guidance to help organizations impacted by the faulty software update that trigged massive IT outages across the globe on Friday. The post CrowdStrike Provides Remediation Guidance After Software Update

React to this headline:

CrowdStrike Provides Remediation Guidance After Software Update Causes Worldwide IT Chaos Read More »

CrowdStrike Says Logic Error Caused Windows BSOD Chaos

BSOD, CrowdStrike, disaster recovery, Falcon, Incident Response, Windows / SecurityTicks

CrowdStrike Says Logic Error Caused Windows BSOD Chaos 2024-07-20 at 08:16 By Ryan Naraine CrowdStrike says a routine sensor configuration update pushed to Windows OS triggered a logic error that blue-screened computers worldwide. The post CrowdStrike Says Logic Error Caused Windows BSOD Chaos appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

CrowdStrike Says Logic Error Caused Windows BSOD Chaos Read More »

Update: Worldwide IT outage due to buggy Crowdstrike update

BH Consulting, Brian Honan, CrowdStrike, cyber resilience, disruption, Don't miss, ESET, Hot stuff, Hunter Strategy, News, Performanta, SANS ISC, Windows / SecurityTicks

Update: Worldwide IT outage due to buggy Crowdstrike update 2024-07-19 at 19:46 By Zeljka Zorz The world is 16+ hours into what looks like the biggest IT outage in history, triggered by a defective update for Crowdstrike endpoint security software for Windows machines. The price of both Crowdstrike’s and Microsoft’s shares tumbled down as a

React to this headline:

Update: Worldwide IT outage due to buggy Crowdstrike update Read More »

Bad CrowdStrike Update Linked to Major IT Outages Worldwide

BSOD, buggy update, CrowdStrike, Featured, Incident Response, Microsoft / SecurityTicks

Bad CrowdStrike Update Linked to Major IT Outages Worldwide 2024-07-19 at 14:01 By Eduard Kovacs Organizations worldwide are reporting major outages due to Windows system crashes caused by a bad CrowdStrike update. The post Bad CrowdStrike Update Linked to Major IT Outages Worldwide appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Bad CrowdStrike Update Linked to Major IT Outages Worldwide Read More »

Faulty CrowdStrike update takes out Windows machines worldwide

Australia, CrowdStrike, Don't miss, Endpoint Security, Europe, Hot stuff, News, UK, USA, Windows / SecurityTicks

Faulty CrowdStrike update takes out Windows machines worldwide 2024-07-19 at 11:31 By Zeljka Zorz Thousands and possibly millions of Windows computers and servers worldwide have been made inoperable by a faulty update of Crowdstrike Falcon Sensors, and the outage affected transport, broadcast, financial, retail and other organizations have been affected in Europe, Australia, the US

React to this headline:

Faulty CrowdStrike update takes out Windows machines worldwide Read More »

CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)

Censys, CrowdStrike, CrushFTP, CVE, Don't miss, enterprise, exploit, FTP, Hot stuff, News / SecurityTicks

CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040) 2024-04-23 at 13:01 By Zeljka Zorz A vulnerability (CVE-2024-4040) in enterprise file transfer solution CrushFTP is being exploited by attackers in a targeted fashion, according to Crowdstrike. The vulnerability allows attackers to escape their virtual file system and download system files (i.e., configuration files), but only if

React to this headline:

CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040) Read More »

CrowdStrike to Acquire Flow Security

cloud security, CrowdStrike, Data Protection, Featured / SecurityTicks

CrowdStrike to Acquire Flow Security 2024-03-06 at 05:03 By SecurityWeek News CrowdStrike says the acquisition of Flow Security will expand its cloud security capabilities with Data Security Posture Management. The post CrowdStrike to Acquire Flow Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

CrowdStrike to Acquire Flow Security Read More »

Attack velocity surges with average breakout time down to only 62 minutes

credentials, CrowdStrike, cybercrime, cybersecurity, election security, exploit, generative AI, News, report, survey / SecurityTicks

Attack velocity surges with average breakout time down to only 62 minutes 2024-02-22 at 07:31 By Help Net Security The speed of cyberattacks continues to accelerate at an alarming rate, according to CrowdStrike. Adversaries increasingly exploit stolen credentials The speed of cyberattacks continues to accelerate at an alarming rate. The report indicates that the average

React to this headline:

Attack velocity surges with average breakout time down to only 62 minutes Read More »

AnyDesk has been hacked, users urged to change passwords

AnyDesk, certificates, credentials, CrowdStrike, data breach, Don't miss, Hot stuff, News, remote access, Resecurity / SecurityTicks

AnyDesk has been hacked, users urged to change passwords 2024-02-05 at 14:31 By Zeljka Zorz AnyDesk Software GmbH, the German company behind the widely used (and misused) remote desktop application of the same name, has confirmed they’ve been hacked and their production systems have been compromised. The statement was published on Friday evening and lacks

React to this headline:

AnyDesk has been hacked, users urged to change passwords Read More »

“Pool Party” process injection techniques evade EDRs

CrowdStrike, Cybereason, Don't miss, Endpoint Security, Hot stuff, Microsoft, News, Palo Alto Networks, PoC, research, SafeBreach, SentinelOne, threat detection, XDR / SecurityTicks

“Pool Party” process injection techniques evade EDRs 12/12/2023 at 14:01 By Zeljka Zorz SafeBreach researchers have discovered eight new process injection techniques that can be used to covertly execute malicious code on Windows systems. Dubbed “Pool Party” because they (ab)use Windows thread pools, these process injection techniques work across all processes and, according to the

React to this headline:

“Pool Party” process injection techniques evade EDRs Read More »

Photos: Cybertech Europe 2023

Armis, Atlantica, CrowdStrike, CyberGuru, Cybertech Europe 2023, Cybertech Global, DGS, F5 Networks, Forcepoint, Fortinet, gamindo, IBM Security, KnowBe4, Leonardo, Lutech, NetWitness, News, Palo Alto Networks, Qualys, Recorded Future, ScourNomad, SentinelOne, Sysdig, Telsy, Thales, Trend Micro, XM Cyber, Zscaler / SecurityTicks

Photos: Cybertech Europe 2023 03/10/2023 at 16:47 By Help Net Security The Cybertech Europe conference and exhibition takes place at La Nuvola Convention Center in Rome, and features the latest innovative solutions from dozens of companies and speakers, including senior government officials, C-level executives, and industry trailblazers from Europe and around the world. Conference sessions

React to this headline:

Photos: Cybertech Europe 2023 Read More »

CrowdStrike to Acquire Application Intelligence Startup Bionic

Application Security, ASPM, Bionic, cloud security, CrowdStrike, Funding/M&A / SecurityTicks

CrowdStrike to Acquire Application Intelligence Startup Bionic 19/09/2023 at 22:47 By Ryan Naraine The cash-and-stock transaction provides capabilities for CrowdStrike to beef up its enterprise cloud security portfolio. The post CrowdStrike to Acquire Application Intelligence Startup Bionic appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

CrowdStrike to Acquire Application Intelligence Startup Bionic Read More »

Identity-Based Attacks Soared in Past Year: Report

CrowdStrike, cybercrime, Fraud & Identity Theft, identity, Identity & Access / SecurityTicks

Identity-Based Attacks Soared in Past Year: Report 08/08/2023 at 16:32 By Eduard Kovacs Identity-based attacks have soared in the past year, according to CrowdStrike’s 2023 Threat Hunting Report. The post Identity-Based Attacks Soared in Past Year: Report appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Identity-Based Attacks Soared in Past Year: Report Read More »

North Korean hackers targeted tech companies through JumpCloud and GitHub

APT, CrowdStrike, Don't miss, GitHub, government-backed attacks, Hot stuff, JumpCloud, Mandiant, News, North Korea, social engineering, spear-phishing / SecurityTicks

North Korean hackers targeted tech companies through JumpCloud and GitHub 21/07/2023 at 16:03 By Helga Labus North Korean state-sponsored hackers have been linked to two recent cyberattack campaigns: one involving a spear-phishing attack on JumpCloud and the other targeting tech employees on GitHub through a social engineering campaign. The JumpCloud intrusion On June 27, JumpCloud

React to this headline:

North Korean hackers targeted tech companies through JumpCloud and GitHub Read More »

Infosecurity Europe 2023 video walkthrough

Absolute, Akamai, alphaMountain, Apricorn, Arctic Wolf Networks, Armis, Axonius, BitSight, conferences, CrowdStrike, Cybervadis, CYE, Darktrace, Devo Technology, Don't miss, EfficientIP, Egress, FireMon, HackTheBox, Hornetsecurity, Hoxhunt, Infosecurity Europe 2023, ISC2, Island, ManageEngine, Microsoft, NetSPI, News, One Identity, OpenText, Panorays, Pentera, Pentest People, Progress, Proofpoint, Rapid7, Senseon, Video, Vulcan Cyber, WatchGuard / SecurityTicks

Infosecurity Europe 2023 video walkthrough 21/06/2023 at 11:24 By Help Net Security Infosecurity Europe 2023 is taking place in London this week, and this video provides a closer look at this year’s event. The post Infosecurity Europe 2023 video walkthrough appeared first on Help Net Security. This article is an excerpt from Help Net Security

React to this headline:

Infosecurity Europe 2023 video walkthrough Read More »

Photos: Infosecurity Europe 2023

CensorNet, Cobalt, conferences, CrowdStrike, Infosecurity Europe 2023, Intruder, Island, ManageEngine, Mazebolt, News, Panorays, Source Photonics, TikTok / SecurityTicks

Photos: Infosecurity Europe 2023 20/06/2023 at 17:37 By Help Net Security Infosecurity Europe is taking place at ExCeL London from 20-22 June 2023 and Help Net Security is on site. Here’s a closer look at the conference featuring: Island, Crowdstrike, Panorays, ManageEngine, Mazebolt, Cobalt, Intruder, TikTok, and CensorNet. The post Photos: Infosecurity Europe 2023 appeared

React to this headline:

Photos: Infosecurity Europe 2023 Read More »