The .sys files causing the issue are channel update files, they cause the top level CS driver to crash as they're invalidly formatted. It's unclear how/why Crowdstrike delivered the files and I'd pause all Crowdstrikes updates temporarily until they can explain.
This is going to turn out to be the biggest 'cyber' incident ever in terms of impact, just a spoiler, as recovery is so difficult.
Kevin Beaumont /
npub176…fkwlw
2024-07-19 11:30:45
in reply to nevent1q…f7dp
Author Public Key
npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlwPublished at
2024-07-19 11:30:45Event JSON
{
"id": "37597b0fe433288ccd0ce594e21d05911963bbf2079d4be36c3a8a01b6d138bf",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1721381445,
"kind": 1,
"tags": [
[
"e",
"0d241f9d103c02c9b6b9292d28394d8263420939400a4eb85f3e56aec0122112",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/112812454405913406",
"activitypub"
]
],
"content": "The .sys files causing the issue are channel update files, they cause the top level CS driver to crash as they're invalidly formatted. It's unclear how/why Crowdstrike delivered the files and I'd pause all Crowdstrikes updates temporarily until they can explain.\n\nThis is going to turn out to be the biggest 'cyber' incident ever in terms of impact, just a spoiler, as recovery is so difficult.",
"sig": "6ed29bc04d1cf67b1de13c0e26b2b6d57bef2edab74882907c58757756c0d5141449c09f721ba4b660dc5bf5b18f76fd1a3440379bfbd8f44f1c5bedfab9a9ba"
}