Microsoft Summit to Address Cybersecurity Post-CrowdStrike

Microsoft will host the Windows Endpoint Security Ecosystem Summit to address how the cybersecurity industry can evolve following the CrowdStrike global IT outage that impacted millions of Windows computers in July.

The event, scheduled for Sept. 10 at Microsoft’s Redmond, Washington campus, aims to bring together cybersecurity experts to explore how the industry can adapt and prevent incidents similar to the CrowdStrike software breach, the company said in a blog post. 

The conference will focus on exploring alternatives for enhancing application security, including a shift from kernel mode to user mode. Kernel mode, used by endpoint protection software like CrowdStrike, Check Point, and SentinelOne, allows deeper system control but can lead to extensive system crashes if an application fails.

A Microsoft executive told CNBC that discussions will also cover emerging technologies such as Extended Berkeley Packet Filter (eBPF), which helps prevent system crashes through program verification, and memory-safe programming languages like Rust. These technologies aim to enhance stability and security, reducing the impact of system errors.

The summit will serve as a platform for sharing insights and proposing solutions to bolster digital security among companies, government representatives, and other key industry stakeholders. Microsoft plans to release more information about the event’s discussions and outcomes at a later date.

On Jul. 19, 2024, a faulty update to CrowdStrike's Falcon platform triggered a global outage that disrupted computer systems across several regions, as reported by MBN. This faulty update led to blue screens of death (BSOD) on numerous Windows devices.

The impact was widespread: major airlines including United, Delta, and American Airlines suspended flights, airline reservation systems in Mexico experienced significant issues, and essential services such as healthcare and banking worldwide were severely affected.