Top all-time · #218
crowdstrike.com
Company blog · crowdstrike.com/blogsecurity
crowdstrike.com is the company blog at crowdstrike.com, writing about security. Since 2013, 221 different Hacker News readers have linked it 299 times, most often “Bears in the Midst: Intrusion into the Democratic National Committee”. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Rarely recommended · 2 of 40 sampled comments recommend it?
Why HN links it
HN readers link CrowdStrike's blog for threat research and incident write-ups, including the DNC intrusion analysis, the July 2024 Channel File incident review and malware evasion techniques.
Summarised by Claude from a sample of 40 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
CrowdStrike is a global cybersecurity leader with an advanced cloud-native platform for protecting endpoints, cloud workloads, identities and data.
Most-linked posts?
- Bears in the Midst: Intrusion into the Democratic National Committee44 people · 52 mentions · first linked 2016-06-15
- DeepSeek writes insecure code if prompt mentions topics restricted in China12 people · 17 mentions · first linked 2025-11-21
- CrowdStrike Incident Preliminary Post Incident Review9 people · 11 mentions · first linked 2024-07-23
- Sunspot: An Implant in the Build Process (How SolarWinds Got Breached)7 people · 9 mentions · first linked 2021-01-11
- Technical Details: Falcon Update for Windows Hosts7 people · 9 mentions · first linked 2024-07-20
- CrowdStrike Official RCA is now out [pdf]7 people · 7 mentions · first linked 2024-08-06
- Russian tracking of Ukrainian Field Artillery Units via Android Malware6 people · 6 mentions · first linked 2016-12-22
- CrowdStrike Terms and Conditions 8.6 Disclaimer5 people · 6 mentions · first linked 2024-07-20
- Preliminary Post Incident Review5 people · 5 mentions · first linked 2024-07-24
- Dealing with Out-of-Memory Conditions in Rust4 people · 4 mentions · first linked 2021-07-27
What Hacker News says?
Although it's a .sys file, it's not a device driver. "Although Channel Files end with the SYS extension, they are not kernel drivers." https://www.crowdstrike.com/blog/technical-details-on-todays...
Comment linking /blog/technical-details-on-todays-outage/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted Preliminary Post Incident Review as a story · 200 points
HN discussionCrowdStrike https://www.crowdstrike.com › resources › infographics Learn how CrowdStrike keeps your critical areas of risk such as endpoints, cloud workloads, data, and identity, safe and your business running
Comment linking /
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted Technical Details on Today's Outage as a story · 124 points
HN discussionLet's think about this for a second. I agree to some extend with what you are trying to say, I just think there's a critical thing missing here in your consideration, and that is usage of the product outside its intended purpose/marketing. Civil engineers built bridges knowingly that civilians use them, and structural failure can cause deaths. The line of responsibility is clear. SW companies (like CrowdStrike (CS))…
Comment linking /platform/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted CrowdStrike Official RCA is now out [pdf] as a story · 120 points
HN discussionConsidering Crowdstrike mentioned in their blog that systems that had their 'falcon sensor' installed weren't affected [1], and the update is falcon content, I'm not sure it was a malformed file, but just software that required this sensor to be installed. Perhaps their QA only checked if the update broke systems with this sensor installed, and didn't do a regression check on windows systems without it. [1] https://…
Comment linking /blog/statement-on-falcon-content-update-for-windows-hosts/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted Dealing with Out-of-Memory Conditions in Rust as a story · 118 points
HN discussionSince we are in political season here in the US, they are also well known as the company that investigated the Russian hack of the DNC. https://www.crowdstrike.com/blog/bears-midst-intrusion-democ...
Comment linking /blog/bears-midst-intrusion-democratic-national-committee/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted 62 Minutes could bring your business down as a story · 105 points
HN discussionThey've bumped this support info to a blog post that's linked from their home page: https://www.crowdstrike.com/blog/statement-on-falcon-content... It includes PDFs of some relevant support pages that someone printed with their browser 5 hours ago. That's probably the right thing to do in such a situation to get this kind of info publicly available ASAP, but still, oof. Looks like lots of people in the Reddit thread…
Comment linking /blog/statement-on-falcon-content-update-for-windows-hosts/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted CrowdStrike Incident Preliminary Post Incident Review as a story · 87 points
HN discussionTheir "Statement" is remarkably aloof for having brought down flights, hospitals, and 911 services. "The issue has been identified, isolated and a fix has been deployed." Maybe I'm misunderstanding what I read elsewhere, but is the machine not BSODing upon boot, prior to a Windows Update service being able to run? The "fix" I see on reddit is roughly: Workaround Steps: 1. Boot Windows into Safe Mode or the Windows R…
Comment linking /blog/statement-on-windows-sensor-update/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted Russian tracking of Ukrainian Field Artillery Units via Android Malware as a story · 37 points
HN discussionThat update is so tone-deaf and half-assed. There's no apology. If you go to the website, there's nothing on their front-page. The post on their blog ( https://www.crowdstrike.com/blog/statement-on-windows-sensor... ) doesn't even link to the solution. There's no link to "Support Portal" anywhere to be seen on their front-page. So, you have to go digging to find the update. And the "Fix" that they've "Deployed" requ…
Comment linking /blog/statement-on-windows-sensor-update/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted How to Deal with Out-of-Memory Conditions in Rust as a story · 17 points
HN discussionFalcon has a feature called "Real Time Response". The sensor is in contact with a server with which it exchanges events serialized in protobuf. One of the event you can get from the Crowdstrike server runs an arbitrary shell command. https://www.crowdstrike.com/tech-hub/endpoint-security/the-p...
Comment linking /tech-hub/endpoint-security/the-power-of-real-time-response/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted Technical Details: Falcon Update for Windows Hosts as a story · 16 points
HN discussionCrowdStrike have finally posted publicly on it: https://www.crowdstrike.com/blog/statement-on-windows-sensor...
Comment linking /blog/statement-on-windows-sensor-update/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted BitLocker recovery in Microsoft Azure [pdf] as a story · 11 points
HN discussionI guess this article might need some updating soon: https://www.crowdstrike.com/resources/reports/total-economic...
Comment linking /resources/reports/total-economic-impact-of-crowdstrike-falcon-complete/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted Crowdstrike – Statement on Falcon Content Update for Windows Hosts as a story · 11 points
HN discussionThis company has post-apocalyptic style photos to make you panic-buy their solution. https://ibb.co/Bc6n527 "62 minutes could bring your business down" I guess they could bring all the businesses down much quicker. https://www.crowdstrike.com/en-us/#teaser-79minutes-adversar... (Repeating my comment because other story is duped)
Comment linking /en-us/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted Article on crowdstrike website has not aged well as a story · 11 points
HN discussionThis company has post-apocalyptic style photos to make you panic-buy their solution. https://ibb.co/Bc6n527 "62 minutes could bring your business down" I guess they could bring all the businesses down much quicker. edit: link https://www.crowdstrike.com/en-us/#teaser-79minutes-adversar...
Comment linking /en-us/
on “CrowdStrike Update: Windows Bluescreen and Boot Loops”Submitted Tracking of Ukrainian Field Artillery Units as a story · 10 points
HN discussionThey may not use the Play Store, but they do use Android apps: https://www.crowdstrike.com/blog/danger-close-fancy-bear-tra...
Comment linking /blog/danger-close-fancy-bear-tracking-ukrainian-field-artillery-units/
on “Russian forces invade Ukraine after Putin orders attack”Submitted The Current State of Exploit Development: Part 1 as a story · 8 points
HN discussionhttps://taskandpurpose.com/news/russia-ukraine-cell-phones-t... Not riding off ad geolocation but hijacking a UA app: https://www.crowdstrike.com/wp-content/brochures/FancyBearTr...
Comment linking /wp-content/brochures/FancyBearTracksUkrainianArtillery.pdf
on “Everyone knows your location: tracking myself down through in-app ads”Submitted I Know What You Did Last Month: A New Artifact of Execution on MacOS 10.13 as a story · 7 points
HN discussion
