To all Sapphire customers,
Sapphire has been made aware of a recent widespread issue that has been reported: Windows machines are experiencing crashes and displaying the Blue Screen of Death (BSOD). Currently, all indicators are pointing toward a CrowdStrike Falcon Sensor Update. This is presently known to affect all Windows PCs with a CrowdStrike Falcon Sensor deployed.
Note: If you are not a user of CrowdStrike’s Falcon security products, you should not be affected by this issue.
At present, there is no indication that this is the result of a malicious attack or third-party action. Indications are that this is a problem with an update released in the last 24 hours.
Please be advised that this issue does not impact Sapphire or our client operations. We are issuing this communication in the interests of the security and resilience of all of our clients to ensure that you have access to the corresponding advice relating to addressing this matter.
CrowdStrike Engineering has identified the responsible content deployment and has since reverted the change.
Publicly available advice from CrowdStrike at this time is as follows:
Tech Alert | Windows crashes related to Falcon Sensor | 2024-07-19printFavoriteCloud: US-1EU-1US-2Published Date: Jul 18, 2024
Summary
CrowdStrike is aware of reports of crashes on Windows hosts related to the Falcon Sensor.
Details
Symptoms include hosts experiencing a bugcheck\blue screen error related to the Falcon Sensor.
Current Action
CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes.
If hosts are still crashing and unable to stay online to receive the Channel File Changes, the following steps can be used to workaround this issue:
Workaround Steps:
1. Boot Windows into Safe Mode or the Windows Recovery Environment
2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
3. Locate the file matching “C-00000291*.sys”, and delete it.
4. Boot the host normally.
CrowdStrike Falcon Customers can find more details here: https://supportportal.crowdstrike.com/s/article/Tech-Alert-Windows-crashes-related-to-Falcon-Sensor-2024-07-19.
While we are not aware that you will be directly affected by these issues, you may encounter third-party suppliers that will be affected.
If you require any further assistance, please get in touch with Sapphire via your Account Manager or: helpdesk@sapphire.net
