This is a 'black eye moment' for CrowdStrike and cybersecurity sector, says Wedbush's Dan Ives

Honestly, this situation makes me uneasy, especially with the potential depression, not just a recession. I'm not sure about my $130K investment strategy given the economic uncertainty.

So a billion dollar cyber security company released software without testing it first? Kyle the intern is so fired.

A major technology news event without Wedbush’s Dan Ives is like a beach 🏖️ w/ no sand.

Microsoft (and probably CrowdStrike) software license are usually very clear : they are not responsible for anything! You are using their software at your own risk.

Release updates on a FRIDAY into PRODUCTION is crazy

I work in IT for a well known retail company with about 1,000 locations in the USA. It hit us hard, not only our corporate employee's laptops, servers, etc are affected but the registers are down. Online ordering systems are down....there's no way to make money. We need to manually fix each store/person/register one by one. It's been a nightmare all day. Thought Fridays were supposed to be easy, smh. FML

My company is having lots of problems. 4 day weekend!

"Black eye moment", "epic disaster", "gold standard", "Apple, Cook, Cupertino Mt. Rushmore", "Mt. Everest up hill battle".

The Biggest Failure is that any update doesnt need to be mass implemented all at once, you have 1-2 days to deploy unless its a cve 8+, there is no reason why you cannot stagger out updates over 24-48 hours with 6 hours for 5% of clients to ensure stability. Lazyness at its extreme both from CrowdStrike and even IT managers that configured to auto update immedietly... Just amazed how complient everyone is to allow any updates to your business's PC's via AD etc without a testing phase of at least 24 hours... Companies realistically need to invest 10% of there budget to Cyber secrutity now but its more like 1-2% not enought in the slightest, as clearly shown... Trust a external entity to patch your systems without prior testing for a day duh.. CIO's failure 100%

If it's an update on CrowdStrike, shouldn't they be testing this update before deploying to production.

Something similar happened with mcAfee in 2010 and it took out computer networks globally

There’s a glitch in the Matrix !!!!!!

OK THIS IS NOT A CYBER ATTACK ITS A SOFTWARE ISSUE BUT THEN AGAIN THIS IS MSCBS

Who is going to verify that the fix has been deployed ?

Every day, there are thousands of failed software updates (globally) that are rolled back. Today's CrowdStrike Falcon release upgrade snafu is simply a release error (or omission) that has a huge supply chain impact. The news media should focus on the topic of risks related to software release management processes.

Andrew interupts EVERY SINGLE GUEST THAT EVER GOES ON CNBC. He's so fking annoying.

I work in cybersecurity, what the hell did I do?

It’s very simple. I don’t understand how all these big companies all make the same mistakes. First never ever auto update. Second only update a few devices in staging environment for 30 days. Third, roll out update to production following successful staging test.

The reporter asked a very intelligent question for a non-IT person at 05:15 - why does this happen to Microsoft and not to Apple devices? Dan Ives explained that it's because of the Apple ecosystem, highlighting that Apple is less exposed on the corporate side and more focused on the consumer market. To expand on this, the underlying reason is that macOS is built on a UNIX foundation, specifically a variant of Unix called LINUX. Unix-based systems, including Linux and macOS, are renowned for their security and stability, which have been honed over decades. This secure foundation, originally developed by pioneers like Linus Torvalds (for Linux), provides a robust environment that is less susceptible to certain types of vulnerabilities. It's not just about Apple's innovations in Cupertino, but also about leveraging the strengths of Unix-like systems.

I am astonished how much talk there has been about the issue without ever mentioning exactly what went wrong. The wording has been it was a faulty update, but what exactly? Then it would be worth knowing exactly how that slipped through the cracks. If this is a publicly traded company that affects other publicly traded companies and institutions it should all be out there in the public eye.