In response to the botched CrowdStrike update that shut down 8.5 million Windows-powered computers in July, it was announced by Microsoft that a security summit would be hosted next month in Washington to go over lessons learned from the worldwide outage.
The tech goliath reported it would hold the “Windows Endpoint Security Ecosystem Summit” on September 10th at its West Coast home base in Redmond.
The company said in the Friday blog post,“Microsoft, CrowdStrike, and key partners who deliver endpoint security technologies will come together for discussions about improving resiliency and protecting mutual customers’ critical infrastructure.”
During the summit, industry leaders – including government representatives for transparency – will review the series of events leading up to the massive outage with the “collective goal” of creating “concrete steps” that Microsoft and its joint customers can take to improve security and resiliency.
Microsoft said the CrowdStrike outage was a teachable moment presenting “important lessons for us to apply as an ecosystem.”
Microsoft will host a Windows Endpoint Security Ecosystem Summit on Sept. 10 to meet with CrowdStrike and other endpoint security partners and discuss improving resiliency and protection for mutual customers’ critical infrastructure. https://t.co/3GHWYGdGEk undefined Microsoft News and Stories (@MSFTnews) August 23, 2024.
Conversations will likewise focus on safe organization rehearses, how to configuration network systems for cyber resiliency, and how the business can best cooperate overall.
Microsoft anticipates that the summit to decisively produce both short- and long-term actions, as well as initiatives that will lead to “more secure and reliable technology for all,” the blog said.
Albeit not open to general society, Microsoft said it intends to share insights regarding the conversations after the summit’s conclusion.
This is Microsoft’s most memorable endeavor to address the July nineteenth outage, which was accused on CrowdStrike conveying an untested security programming patch to great many clients, eventually making a huge number of Windows laptops crash and show the feared ‘blue screen of death.’
The outage was felt around the world.
Operations across the world were disrupted by the CrowdStrike outage, impacting multiple industries including major airlines, media outlets, banking, healthcare, and emergency services.
Delta Air Lines, who needed to drop huge number of trips because of its systems being down for almost seven days, documented suit against CrowdStrike recently to attempt to recover its assessed $500 million in misfortunes.
CrowdStrike, which has lost about $9 billion of its market value since the outage, has also been sued by shareholders, who said the cybersecurity company defrauded them by concealing how its inadequate software testing could cause the global disruption, according to Reuters.
The outage and subsequent aftermath have raised questions not only on how to prevent future incidents, but also on the dangers of companies not diversifying the cybersecurity products and vendors being used.
Security insiders have also warned of threat actors capitalizing on the chaos, with an expected influx of CrowdStrike-related phishing attacks, fake websites, and other nefarious scams to take place during the recovery period.
Besides,the outage highlights that many organizations are ill-prepared to handle a single point of failure, from less-than-effective incident response plans to poorly held backup systems.
“We anticipate carrying our viewpoint to the conversations with Microsoft and industry and government partners on the requirement for a more resilient ecosystem,” a CrowdStrike spokesperson told Reuters on Friday.
CrowdStrike’s CEO George Kurtz will testify in Washington at the request of US lawmakers later this year.