Asklemmy

43992 readers

853 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
[email protected]: a community for finding communities

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago

MODERATORS

[email protected]

Can/will the CrowdStrike outage be replicated by hackers? (lemmy.zip)

submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]

11 comments fedilink hide all child comments

The CrowdStrike cyber event affected 8.5 million Windows machines and was the biggest IT outage in history. It has "beaten" even the cyber attacks of WannaCry and NotPetya.

https://www.bbc.com/news/articles/cpe3zgznwjno

Can/will this method be used by hackers? What would they need to do to take advantage of that vulnerability?

EDIT: typo

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 5 points 4 months ago (1 children)

"Hackers" (rather, malicious actors) rarely look to take down IT resources as their goal. Instead, they want to access it for their own purposes. The closest example would be ransomware, where it gets taken down as part of the threat/punishment. But if the victim pays, their resources must be restored.

Plus, I would be surprised if Crowd Strike doesn't have any protections on its own files. I also expect there will be additional verification checks (hash/etc) on their updates going forward.

[–] [email protected] 0 points 4 months ago (2 children)

malicious actors rarely look to take down IT resources as their goal

Could be a hostile government sponsored group or idealists (Microsoft has more haters than fans) or simply someone could do it just because they can - if they could. Some men just want to see the world burn.

[–] Sethayy 2 points 4 months ago

They could also DDOS essentially anything with root access to that many devices.

Its like taking all the armies guns to throw them in a volcano 'cause you want to see the world burn'