Microsoft rethinks security strategy to avoid another CrowdStrike incident

The news: Microsoft is updating Windows to allow security vendors to operate outside of the Windows kernel in an effort to enhance system resilience and security. 

The Big Tech company is responding to security vulnerabilities exposed by the CrowdStrike incident in July that affected 8.5 million Windows PCs, grounding tens of thousands of flights and taking down emergency services. 

Insurers estimated that CrowdStrike’s error would cost Fortune 500 companies more than $5 billion in losses.

First Published on Sep 13, 2024