Rough patch: CrowdStrike sparks an auto-update debate
Automating software updates helps keep hackers at bay but can introduce op risk; banks balance the two
When it comes to minimising cyber threats, speed is of the essence. If companies delay vital updates to software, they leave themselves exposed to hackers. Which is why the automatic update approach used by major cyber security vendor CrowdStrike looked like a good idea.
Until it didn’t.
In July this year, when a faulty patch – a targeted update – caused its clients’ operating systems to crash, there was little companies could do to stop it because the updating process was automatic.
A CrowdStrike
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (point 2.4), printing is limited to a single copy.
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (clause 2.4), an Authorised User may only make one copy of the materials for their own personal use. You must also comply with the restrictions in clause 2.5.
If you would like to purchase additional rights please email info@risk.net
More on Risk management
More cleared repo sponsors join Eurex ahead of cross-margining
End of TLTROs for banks and pension fund search for liquidity management tools drives uptake
Reimagining model risk management: new tools and approaches for a new era
A collaborative report by Chartis and Evalueserve on how the use of automation can combat the growing complexity of managing model risk due to regulation and market volatility
What Goldman’s appeal victory means for Fed stress tests
Decision could embolden more banks to appeal, analysts say. But others believe result is one-off
Clearing members rattled as CME approved to launch its own FCM
National Futures Association registration sharpens concerns about conflict of interest with CCP
CME files application for US Treasury and repo clearing
New entrant believes direct user access model will avoid accounting problem that hampers rival FICC
UST repo clearing: considerations for ‘done-away’ implementation
Citi’s Mariam Rafi sets out the drivers for sponsored and agent clearing of Treasury repo and reverse repo
Gensler to stick to Treasury clearing timetable
SEC chief promises to keep up the pressure for done-away trades
Clearing houses fear being classified as Dora third parties
As 2025 deadline looms, CCP and exchange members seek risk information that’s usually deemed confidential
