Microsoft technical breakdown of CrowdStrike incident
We examine the recent CrowdStrike outage and provide a technical overview of the root cause.
Visit microsoft.com → On Hacker News Sep 2009 – Apr 2025
Tech Industry & Business 22Software Engineering 14AI & Machine Learning 12Security & Privacy 11Infrastructure & DevOps 7Systems & Performance 6
We examine the recent CrowdStrike outage and provide a technical overview of the root cause.
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
While Kubernetes has many advantages, it also brings new security challenges.
We, along with the security industry and our partners, continue to investigate the extent of the Solorigate attack. While investigations are underway, we want to provide the defender community with intel to understand the scope and impact, remediation guidance, and detections and protections we have built as a result.
Updated on August 2, 2021: Windows 365 is now generally available to businesses of all sizes. Learn more about Windows 365 and experience it today. As some regions begin to make their way out of the challenges and disruption of the past 18 months, we’re seeing a new world of work emerge.
The Microsoft Threat Intelligence Center (MSTIC) has detected nation-state activity associated with the threat actor tracked as NOBELIUM, attempting to gain access to downstream customers of multiple cloud service providers (CSP), managed service providers (MSP), and other IT services organizations.
Commercial cloud annualized revenue run rate exceeds $9.4 billion; Windows 10 active on over 200 million devices