Summary
This advisory serves as a guide to provide situational awareness regarding potential threats stemming from a significant Windows system outage caused by an update from Crowdstrike. On July 19, 2024, an update to the Falcon EDR solution resulted in widespread Windows system crashes, commonly referred to as the Blue Screen Of Death (BSOD). The advisory emphasizes the importance of maintaining awareness of emerging threats as malicious actors may exploit this incident by targeting affected organizations or disseminating misinformation. It also underscores the necessity for effective crisis management, including pre-crisis preparations such as crisis simulations and post-crisis evaluations to identify and address shortcomings. Additionally, the advisory recommends conducting threat hunting exercises to assess any potential exploitation attempts during this outage. Specific recommendations include restricting information sourcing to official channels, applying the official fix provided by Crowdstrike, and regularly conducting crisis simulation exercises to enhance incident response capabilities.
