this post was submitted on 23 Jul 2024
12 points (75.0% liked)

Asklemmy

43391 readers
1477 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy ๐Ÿ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago
MODERATORS
 

The CrowdStrike cyber event affected 8.5 million Windows machines and was the biggest IT outage in history. It has "beaten" even the cyber attacks of WannaCry and NotPetya.

https://www.bbc.com/news/articles/cpe3zgznwjno

Can/will this method be used by hackers? What would they need to do to take advantage of that vulnerability?

EDIT: typo

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 5 points 1 month ago (1 children)

"Hackers" (rather, malicious actors) rarely look to take down IT resources as their goal. Instead, they want to access it for their own purposes. The closest example would be ransomware, where it gets taken down as part of the threat/punishment. But if the victim pays, their resources must be restored.

Plus, I would be surprised if Crowd Strike doesn't have any protections on its own files. I also expect there will be additional verification checks (hash/etc) on their updates going forward.

[โ€“] [email protected] 0 points 1 month ago (2 children)

malicious actors rarely look to take down IT resources as their goal

Could be a hostile government sponsored group or idealists (Microsoft has more haters than fans) or simply someone could do it just because they can - if they could. Some men just want to see the world burn.

[โ€“] [email protected] 2 points 1 month ago

They could also DDOS essentially anything with root access to that many devices.

Its like taking all the armies guns to throw them in a volcano 'cause you want to see the world burn'