Falcon Channel File 291 update crashes Windows hosts worldwide
Jul 19, 04:09 UTCJul 19, 05:27 UTC
Duration
1h 18m
Impact
Critical
Root cause
Config change
CrowdStrike, 90 days
0 incidents
Affected
Falcon sensor for WindowsGlobal
Lesson: Content and configuration updates need the same staged rollout, validation and customer control as code releases.
What happened
A Rapid Response Content update for the Falcon sensor defined 21 input fields while the sensor code supplied 20, causing an out-of-bounds read and a crash on Windows hosts that received it between 04:09 and 05:27 UTC. Affected machines needed manual recovery for days.
Also caused by configuration change
All| Started | Vendor | Incident | Impact | Duration |
|---|---|---|---|---|
| Sep 2218:20 UTC |  Twilio | Phone Number APIs and Console Were Returning Incorrect 404 ResponsesTwilio | none | 0m |
| Sep 1622:30 UTC |  Cloudflare | Hyperdrive Elevated Origin Connection Failure RatesCloudflare | none | 0m |
| Sep 1211:04 UTC |  Slack | Some customers experiencing blurry image previews and download issuesSlack | minor | 8h 56m |
| Sep 1107:18 UTC |  Snowflake | INC20000213Snowflake | critical | 6h 1m |
| Sep 407:34 UTC | Snowflake | INC20000199Snowflake | critical | 2h 36m |
| Sep 109:58 UTC | Snowflake | INC20000190Snowflake | major | 3h 52m |
From vendors' own status pages and disclosures. Times as reported. Logos via logo.dev; trademarks belong to their owners.