CrowdStrike blames testing bugs for security update that took down 8.5M Windows PCs

Company says it's improving testing processes to avoid a repeat.

See full article...

 

[Power_Struggle]

Are there already organisations that will pivot to an A/B setup with two different providers for endpoint security?

Considering that this software runs at kernel level, considering that the operational impact can be huge and considering that this isn’t the first time such a thing happens?

A/B might also cover the case where the security software doesn’t protect (yet) but competing software does.

 

[Power_Struggle]

EU says that MS can’t block kernel access if MS’s own Defender still gets kernel access.
They want a level playing field between MS’s and 3-rd party AV.

If MS would make APIs and have defender use those, all would be fine.

It takes two to tango…