Falcon Channel File 291 update crashes Windows hosts worldwide
Jul 19, 04:09 UTCJul 19, 05:27 UTC
Duration
1h 18m
Impact
Critical
Root cause
Config change
CrowdStrike, 90 days
0 incidents
Affected
Falcon sensor for WindowsGlobal
Lesson: Content and configuration updates need the same staged rollout, validation and customer control as code releases.
What happened
A Rapid Response Content update for the Falcon sensor defined 21 input fields while the sensor code supplied 20, causing an out-of-bounds read and a crash on Windows hosts that received it between 04:09 and 05:27 UTC. Affected machines needed manual recovery for days.
Also caused by configuration change
All| Started | Vendor | Incident | Impact | Duration |
|---|---|---|---|---|
| Sep 2423:36 UTC |  Render | Key Value service restartsRender | minor | 0m |
| Sep 2414:08 UTC |  HubSpot | The Salesforce integration is unavailable for some customersHubSpot | none | 7h 18m |
| Sep 2218:20 UTC |  Twilio | Phone Number APIs and Console Were Returning Incorrect 404 ResponsesTwilio | none | 0m |
| Sep 1622:30 UTC |  Cloudflare | Hyperdrive Elevated Origin Connection Failure RatesCloudflare | none | 0m |
| Sep 1211:04 UTC |  Slack | Some customers experiencing blurry image previews and download issuesSlack | minor | 8h 56m |
| Sep 1107:18 UTC |  Snowflake | INC20000213Snowflake | critical | 6h 1m |
Sources: vendors' own status pages, published postmortems and SEC 8-K Item 1.05 filings, read daily. Times as reported. Logos via logo.dev; trademarks belong to their owners.