CrowdStrike Implements Phased Content Update Procedures Following July Outage

In July, a faulty configuration update caused widespread disruptions, impacting over 8.5 million Windows devices and affecting critical services such as airlines, hospitals, and emergency response systems. During a congressional hearing, CrowdStrike’s senior vice president, Adam Meyers, expressed regret for the incident and outlined the company’s new approach to content updates. Previously, CrowdStrike released updates simultaneously to all customers, which contributed to the outage. The new phased approach treats content updates like code updates, involving internal testing and optional participation for customers, allowing them to choose when to adopt updates based on their risk tolerance.

New Update Procedures

1. Internal Release Process: Updates will undergo a thorough internal review before being distributed.
2. Early Adopter Program: Customers can opt to receive updates as soon as they are available, gaining access to the latest threat intelligence.
3. General Availability: Updates will be made available to a broader audience after initial testing.
4. Customer Choice: Customers now have the option to delay updates, allowing for more control over their systems while acknowledging the potential risks of not having the latest information.

These changes aim to enhance the reliability of CrowdStrike’s services and restore trust among clients and stakeholders. The company is committed to learning from the July incident and ensuring that such a failure does not occur again.