4 ms·
I'm not disagreeing with your overall point, but I think it's important to clarify that Crowdstrike did not experience a breach -- rather, they pushed a bad sof
by Centigonal 2y ago
I'm not disagreeing with your overall point, but I think it's important to clarify that Crowdstrike did not experience a breach -- rather, they pushed a bad software update to their global customer base, resulting in widespread chaos. The cause was an internal mistake, not a threat actor.
- nilamo 2y agoRight, that's much worse.
- 0xy 2y agoInternal mistake seems to be underplaying it. They do not follow modern SDLC practices, have no mechanism for testing, are unable to rollback effectively etc. The bad software update was a mistake made a global catastrophe due to deliberately bad practices. No tests is not a mistake, they simply did not give a damn.
- chii 2y agoWith such an internal mistake so easily deployed, i would argue that a breach might've already happened that's a lot more sophisticated and was not detected at all.
- ThePowerOfFuet 2y agoThat their shitty internal processes permitted such a thing to happen indicates that they _were_ the threat actor.