Security software. You want zero-day protection. From the user perspective. Nothing should ever be pushed out by a developer before adequately testing.
Exactly, Crowdstrike really screwed up on this. I'm honestly gobsmacked this got released by them, as it appears to affect 100% of machines 100% of the time. Usually it's some weird combination that triggers these problems.
That said, all major antivirus vendors have experienced similar issues over the last 20+ years. At work we do our sensor updates in stages with reasonable time gaps in between (over a period of 2 weeks iirc). We also don't update the backup failover servers. So if a bad update comes out we can mitigate the issue by failing over. Of our fleet around 20% of devices (servers and laptops) were impacted (including my laptop). Because we use bitlocker there is no backdoor without a lot of fluffing around.
So all those companies that were completely nuked by this weren't following good practices.
I also thought it was funny how Microsoft themselves were so heavily impacted. Given they tell everyone they don't need Crowdstrike and should use Windows Defender... obviously Microsoft don't believe their own sales pitch.
