Ep5: CrowdStrike's faulty update shuts down global networks

Security Conversations

Three Buddy Problem - Episode 5: Hot off the press, we dive into the news of the CrowdStrike software update that caused blue screens on computers worldwide, the resulting chaos and potential connections to the Microsoft 365 outage, the fragility of modern computing and the risks of new software paradigms.

We also discuss the AT&T mega-breach and the ransom paid to delete the stolen data; the challenges of ransomware and the uncertainty surrounding the deletion of stolen data; the FBI gaining access to a password-protected phone, the prices for zero-click exploits; and the resurgence of APT 41 with expanding targets.

Plus, some news on upcoming keynote speakers at LabsCon 2024.

Hosts: Costin Raiu (Art of Noh), Juan Andres Guerrero-Saade (SentinelLabs), Ryan Naraine (SecurityWeek)

Links:

• Transcript (AI-generated, unedited)
• CrowdStrike Statement on Falcon Content Update for Windows Hosts
• Microsoft-CrowdStrike blackout FAQ
• Bad CrowdStrike Update Linked to Major IT Outages Worldwide
• CrowdStrike CEO George Kurtz statement on Twitter
• AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records
• T-Mobile Hacker Who Stole Data on 50 Million Customers: ‘Their Security Is Awful’
• LABScon 2024 Speakers