CrowdStrike update

Winsage
July 12, 2025
Microsoft has rolled out a fix for the Extended Security Updates (ESU) wizard for Windows 10 Insiders, addressing a glitch that caused the enrollment process to crash. The update is available in the Release Preview Channel and resolves an issue where the ESU enrollment wizard would close when users clicked "Enroll now." This tool is essential for maintaining security updates for Windows 10 after official support ends in October 2025. The Release Preview Channel for Windows 11 24H2 introduces a change, replacing the Blue Screen of Death with the Black Screen of Unexpected Restart as part of the Windows Resiliency Initiative. Corporate usage of Windows 11 has surpassed 50.6 percent, a 16.8 percent increase since early 2025, driven by upgrade campaigns and new hardware rollouts. Windows 10 will reach its end-of-life on October 14, 2025, and nearly half of all business devices are still running it. Kieren Jessop from Canalys noted that the surge in Windows 11 adoption is primarily driven by the U.S., and the transition to Windows 11 is expected to be lengthy, similar to the persistence of Windows 7 after its end in January 2020. He mentioned that the slow transition could help demand in the PC market, as older devices are replaced over time.
Winsage
June 26, 2025
David Weston, Microsoft’s Corporate Vice President of Enterprise and OS Security, stated that Microsoft is preparing to enhance the resilience and security of its Windows operating system. The company will offer limited access to a Windows endpoint security platform for third-party vendors as part of its Microsoft Virus Initiative (MVI), aimed at improving safe deployment practices. The platform will enter a private preview phase in July for select MVI partners, allowing them to provide feedback. Key features include collaboration with third-party vendors, services running outside the Windows kernel, and development driven by partner feedback. The Windows endpoint security platform will enable partners to develop products that operate in user mode, preventing disruptions like the previous CrowdStrike incident. Weston emphasized the importance of customer trust and transparency in the development process. Microsoft is also introducing a simplified user interface and a quick machine recovery service for Windows 11 version 24H2, along with a Connected Cache service launching on July 9 to enhance bandwidth efficiency. Support for Microsoft’s initiatives has come from various third-party security vendors involved in the MVI, with positive feedback from Microsoft solution providers regarding enhanced protection against third-party software issues.
Tech Optimizer
June 13, 2025
Microsoft attributed a recent global outage affecting various digital infrastructures to a "CrowdStrike update," which disrupted multiple applications including OneDrive, OneNote, Outlook, PowerBI, Microsoft Teams, and others. Users experienced issues such as synchronization failures and access difficulties. The incident highlights vulnerabilities in supply chains that organizations rely on for managing sensitive data, which can be targeted by cyber threats. Data Loss Prevention (DLP) is a feature within Microsoft Purview designed to protect sensitive information from unauthorized disclosure. DLP policies can monitor user activity and take protective actions like alerting users about inappropriate sharing, blocking sharing attempts, or relocating data to secure locations. DLP can be applied across various platforms, including Office 365 applications and Windows endpoints. The DLP lifecycle includes planning and deployment phases, where organizations assess data to be monitored and ensure policies do not disrupt workflows. Monitoring and reporting tools provide insights into policy matches and incidents, helping organizations refine their DLP efforts. However, DLP has limitations, including false positives, user resistance, and challenges in detecting data leakages through new communication channels.
Winsage
May 12, 2025
Microsoft has released an official guide to address the Blue Screen of Death (BSOD) issues in Windows 11 and Windows 10, updated on May 11, 2025, following a significant global outage in July 2024 caused by a problematic CrowdStrike update. The guide categorizes troubleshooting into basic and advanced steps, highlighting common error codes like PAGEFAULTINNONPAGEDAREA (0x00000050). Approximately 75% of stop errors are attributed to faulty drivers, making driver verification essential. Basic troubleshooting includes removing recently added hardware, booting into Safe Mode, checking Device Manager for problematic components, ensuring 10-15% free disk space, installing the latest Windows Updates, and using System Restore. Advanced troubleshooting involves using Event Viewer, running Windows Memory Diagnostics, and analyzing memory dumps with WinDbg. The guide emphasizes the resource-intensive nature of Driver Verifier and suggests testing suspicious drivers in smaller groups. It also includes hardware-specific troubleshooting tips, such as checking for overheating components and performing disk diagnostics with the “chkdsk” command.
Winsage
March 31, 2025
Microsoft has launched a quick machine recovery feature in its Windows operating system to help IT administrators remotely execute fixes on machines that cannot boot, particularly during widespread outages. This feature allows devices to automatically enter Windows Recovery Environment (WinRE) and connect with Microsoft’s recovery services for tailored remediations delivered via Windows Update. IT administrators can enable or disable this feature remotely and configure settings such as scanning intervals and restart timeouts. Currently, quick machine recovery is in testing and available to users in the Windows Insider Program, with plans for future accessibility to IT administrators managing Windows 11 Pro and Enterprise devices.
Winsage
March 30, 2025
Microsoft is testing a new tool for Windows 11 called Quick Machine Recovery, which aims to address issues related to buggy drivers and configurations that hinder the operating system's startup. This tool is part of the Windows Resiliency Initiative, designed to enhance system stability and minimize downtime by automating the detection, diagnosis, and rectification of critical failures. Quick Machine Recovery will allow Microsoft to deploy targeted remediations remotely during widespread outages affecting device startup, thus automating fixes without complex manual interventions. The tool will automatically initiate when a new driver or configuration change disrupts startup, establishing an internet connection to transmit crash data to Microsoft for analysis and remote fixes. Microsoft plans to enable this feature by default in Windows 11 Home editions, with customization options for enterprise users. A test remediation package will soon be released for Windows Insider Preview Beta Channel users to experience Quick Machine Recovery.
Winsage
March 29, 2025
A new feature has been introduced to enhance system reliability and mitigate the risk of widespread outages, following disruptions caused by a recent Crowdstrike update. This initiative aims to address vulnerabilities in complex software ecosystems, instill user confidence, and ensure operations remain resilient against unexpected challenges. Key benefits include enhanced reliability, proactive risk management, and increased user confidence. The development reflects a trend in the tech sector prioritizing reliability and user experience.
Winsage
October 1, 2024
An update for Windows 11, KB5043145 (OS Builds 22621.4249 and 22631.4249), released on September 26, 2024, is causing devices to enter a cycle of repeated reboots and has resulted in blue and green screen errors. Microsoft has warned users that the update may lead to unresponsive systems and trigger BitLocker recovery. There is currently no immediate solution, and Microsoft is investigating the issue. Users are advised to refrain from uninstalling the update until a fix is provided.
Winsage
August 29, 2024
A critical vulnerability identified as CVE-2024-38063 has been discovered in Windows 10, 11, and Server versions, with a severity score of 9.8. This flaw allows remote code execution and was addressed in a cumulative update released on August 13. A proof-of-concept for the vulnerability has been shared, detailing a method to replicate it using the command "bcdedit /set debug on" followed by a restart. Microsoft has stated that while the vulnerability had not been exploited initially, it was only a matter of time before it would be targeted. Users are strongly advised to install the latest security patches to protect their systems from potential cyberattacks.
Search