貓王、布蘭妮和雪兒在經(jīng)歷過一段低潮之后,都在拉斯維加斯得到了救贖。
上周則輪到了Crowdstrike。
上個月,這家陷入困境的網(wǎng)絡(luò)安全公司因為存在漏洞的軟件升級,導(dǎo)致全球計算機出現(xiàn)大面積癱瘓。在一年一度的黑帽(Black Hat)安全會議上,這家公司卻出人意料地大受歡迎,訪客紛紛涌入它的展臺拍照留念,并領(lǐng)取帶有公司標志的T恤和其他紀念品。
一位在Crowdstrike展廳前排隊的訪客提到了該公司提供的具有收藏價值的擺件,并對《財富》雜志稱:“我朋友說我一定要領(lǐng)一件?!?/p>
對于許多人來說,Crowdstrike最近的壞名聲,反而是它吸引人的地方之一。
美國西海岸一家大型便利店和加油站連鎖的高級安全工程師弗蘭克·弗拉納根穿著一件五顏六色的T恤,戴著牛仔帽。他對《財富》雜志稱,他排隊的目的就是為了得到一個擺件。
他笑著說:“我希望一年后它會升值?!彼_玩笑說,如果這家公司因有缺陷的軟件升級而陷入法律糾紛,最終導(dǎo)致其破產(chǎn),那么這款擺件就會升值。
Crowdstrike導(dǎo)致全球運行微軟(Microsoft)Windows系統(tǒng)的電腦顯示“藍屏死機”,造成全球數(shù)千架航班停飛,銀行和醫(yī)院系統(tǒng)宕機。自此次事件發(fā)生以來,Crowdstrike的股價下跌了約40%。達美航空(Delta)稱,Crowdstrike要為達美航班取消造成的超過5億美元損失全權(quán)負責。
雖然Crowdstrike得到的負面關(guān)注,讓黑帽大會的許多參會者覺得有趣,但《財富》雜志采訪的大多數(shù)人表示,盡管發(fā)生了此次事件,但Crowdstrike依舊是一家穩(wěn)健且信譽良好的公司。Crowdstrike的一位客戶是一家連鎖餐廳的安全專家。他表示,他對該公司在此次停機事件中的反應(yīng)非常滿意,而且他的公司很快就恢復(fù)了正常運行。其他與會者則普遍認為,Crowdstrike不應(yīng)該為這種常規(guī)升級造成的問題負責,因為這種情況可能發(fā)生在與微軟Windows系統(tǒng)緊密聯(lián)系的任何安全公司身上。
德克薩斯理工大學(xué)(Texas Tech University)法律與網(wǎng)絡(luò)安全教授史蒂夫·布萊克指出,達美航空對Crowdestrike的主張并非板上釘釘。他表示,關(guān)于一家公司對于自身的恢復(fù)能力應(yīng)該承擔多大責任,這是一個重要的法律問題。
布萊克表示:“法院對數(shù)字損害的性質(zhì)存在分歧。原告是否需要證明財務(wù)損失才能勝訴?”這起案件取決于達美航空在多大程度上依賴受軟件更新影響的系統(tǒng),其與Crowdstrike簽署的服務(wù)協(xié)議的內(nèi)容,以及達美航空期待獲得怎樣的賠償。他說道:“如果我延誤了,我可能也要為一些損失負責。”
CEO道歉和T恤衫
Crowdstrike的名字在黑帽大會上似乎無處不在,但原因并不完全是當前的新聞報道。諷刺的是,Crowdstrike是今年大會的主要贊助商之一,因此當專題討論會上提到該公司的名字和大型廣告牌上顯示該公司的名稱時,引起了與會者的陣陣笑聲。
CrowdStrike在曼德勒海灣酒店(Mandalay Bay)會議中心的室內(nèi)通道上方投放了一則大型廣告,廣告上寫著:“對手不會停止。我們也不會停止?!?以及“韌性從我們開始。我們始終專注于您的需求?!?/p>
據(jù)《華盛頓郵報》報道,Crowdstrike公司的CEO喬治·庫爾茨在一次專題討論會上發(fā)言,并就此次崩潰事件向觀眾道歉。有一位觀眾對《華盛頓郵報》表示“喬治的話很簡短,但說得很好?!眴讨蔚脑捠艿綗崃覛g迎,“這讓我很意外,因為網(wǎng)絡(luò)安全社區(qū)通常非常挑剔?!?/p>
在大會的開幕演講中,Crowdstrike事件被頻繁討論。開幕演講嘉賓包括美國網(wǎng)絡(luò)安全與基礎(chǔ)設(shè)施安全局(U.S. Cybersecurity and Infrastructure Security Agency)局長珍·伊斯特利。她表示,大面積停機進一步凸顯出“網(wǎng)絡(luò)韌性”和技術(shù)提供商進行認真細致的測試和設(shè)計的必要性。
CyberSaint公司CEO杰瑞·雷登對《財富》雜志表示,由于此次停機事件造成的經(jīng)濟影響巨大,因此追究責任時面臨巨大風險。他的公司進行的分析估計,此次停機事件僅僅給《財富》500強公司造成的營業(yè)損失就高達50億美元。
雷登認為,達美航空也要為其損失承擔一定責任。他說道:“他們必須要承擔一定的責任去了解環(huán)境,了解最大的風險是什么。”他指出,大多數(shù)組織認為遭到攻擊才是最大的網(wǎng)絡(luò)風險,但軟件更新漏洞也可能影響整體運營?!鞍沿熑稳繗w咎于Crowdstrike不公平。”
有人指出,微軟也應(yīng)該為此次停機承擔一定責任。許多人認為,此次停機的原因是Windows核心架構(gòu)的設(shè)計,可能導(dǎo)致惡意軟件、垃圾軟件和驅(qū)動程序不穩(wěn)定等問題。網(wǎng)絡(luò)安全專家、律師和前FBI探員埃里克·奧尼爾表示:“微軟不應(yīng)該給予第三方如此高的訪問權(quán)限。微軟可能辯稱這是技術(shù)或許可的工作方式,但這只是借口,因為同樣的問題并不影響Linux或Mac系統(tǒng)。而且Crowdstrike很早就發(fā)現(xiàn)了這個問題?!?/p>
在Crowdstrike的展臺,“T恤吧”的工作人員忙著操作設(shè)備,制作定制T恤衫,還有人在向訪客發(fā)放小盒子,里面裝著人們夢寐以求的擺件。這款擺件名為“水生熊貓”和“分散蜘蛛”,分別代表了著名的黑客組織和網(wǎng)絡(luò)罪犯。
一位正在排隊的安全研究人員表示,他不知道這些紀念品是什么,但聽說它們很受歡迎。似乎為了避免設(shè)定過高的預(yù)期,這位研究人員補充說,可能并不是什么特別精致的東西。他說道,畢竟“這家公司的股價已經(jīng)下跌了40%”。(財富中文網(wǎng))
譯者:劉進龍
審校:汪皓
貓王、布蘭妮和雪兒在經(jīng)歷過一段低潮之后,都在拉斯維加斯得到了救贖。
上周則輪到了Crowdstrike。
上個月,這家陷入困境的網(wǎng)絡(luò)安全公司因為存在漏洞的軟件升級,導(dǎo)致全球計算機出現(xiàn)大面積癱瘓。在一年一度的黑帽(Black Hat)安全會議上,這家公司卻出人意料地大受歡迎,訪客紛紛涌入它的展臺拍照留念,并領(lǐng)取帶有公司標志的T恤和其他紀念品。
一位在Crowdstrike展廳前排隊的訪客提到了該公司提供的具有收藏價值的擺件,并對《財富》雜志稱:“我朋友說我一定要領(lǐng)一件?!?/p>
對于許多人來說,Crowdstrike最近的壞名聲,反而是它吸引人的地方之一。
美國西海岸一家大型便利店和加油站連鎖的高級安全工程師弗蘭克·弗拉納根穿著一件五顏六色的T恤,戴著牛仔帽。他對《財富》雜志稱,他排隊的目的就是為了得到一個擺件。
他笑著說:“我希望一年后它會升值?!彼_玩笑說,如果這家公司因有缺陷的軟件升級而陷入法律糾紛,最終導(dǎo)致其破產(chǎn),那么這款擺件就會升值。
Crowdstrike導(dǎo)致全球運行微軟(Microsoft)Windows系統(tǒng)的電腦顯示“藍屏死機”,造成全球數(shù)千架航班停飛,銀行和醫(yī)院系統(tǒng)宕機。自此次事件發(fā)生以來,Crowdstrike的股價下跌了約40%。達美航空(Delta)稱,Crowdstrike要為達美航班取消造成的超過5億美元損失全權(quán)負責。
雖然Crowdstrike得到的負面關(guān)注,讓黑帽大會的許多參會者覺得有趣,但《財富》雜志采訪的大多數(shù)人表示,盡管發(fā)生了此次事件,但Crowdstrike依舊是一家穩(wěn)健且信譽良好的公司。Crowdstrike的一位客戶是一家連鎖餐廳的安全專家。他表示,他對該公司在此次停機事件中的反應(yīng)非常滿意,而且他的公司很快就恢復(fù)了正常運行。其他與會者則普遍認為,Crowdstrike不應(yīng)該為這種常規(guī)升級造成的問題負責,因為這種情況可能發(fā)生在與微軟Windows系統(tǒng)緊密聯(lián)系的任何安全公司身上。
德克薩斯理工大學(xué)(Texas Tech University)法律與網(wǎng)絡(luò)安全教授史蒂夫·布萊克指出,達美航空對Crowdestrike的主張并非板上釘釘。他表示,關(guān)于一家公司對于自身的恢復(fù)能力應(yīng)該承擔多大責任,這是一個重要的法律問題。
布萊克表示:“法院對數(shù)字損害的性質(zhì)存在分歧。原告是否需要證明財務(wù)損失才能勝訴?”這起案件取決于達美航空在多大程度上依賴受軟件更新影響的系統(tǒng),其與Crowdstrike簽署的服務(wù)協(xié)議的內(nèi)容,以及達美航空期待獲得怎樣的賠償。他說道:“如果我延誤了,我可能也要為一些損失負責。”
CEO道歉和T恤衫
Crowdstrike的名字在黑帽大會上似乎無處不在,但原因并不完全是當前的新聞報道。諷刺的是,Crowdstrike是今年大會的主要贊助商之一,因此當專題討論會上提到該公司的名字和大型廣告牌上顯示該公司的名稱時,引起了與會者的陣陣笑聲。
CrowdStrike在曼德勒海灣酒店(Mandalay Bay)會議中心的室內(nèi)通道上方投放了一則大型廣告,廣告上寫著:“對手不會停止。我們也不會停止?!?以及“韌性從我們開始。我們始終專注于您的需求?!?/p>
據(jù)《華盛頓郵報》報道,Crowdstrike公司的CEO喬治·庫爾茨在一次專題討論會上發(fā)言,并就此次崩潰事件向觀眾道歉。有一位觀眾對《華盛頓郵報》表示“喬治的話很簡短,但說得很好?!眴讨蔚脑捠艿綗崃覛g迎,“這讓我很意外,因為網(wǎng)絡(luò)安全社區(qū)通常非常挑剔。”
在大會的開幕演講中,Crowdstrike事件被頻繁討論。開幕演講嘉賓包括美國網(wǎng)絡(luò)安全與基礎(chǔ)設(shè)施安全局(U.S. Cybersecurity and Infrastructure Security Agency)局長珍·伊斯特利。她表示,大面積停機進一步凸顯出“網(wǎng)絡(luò)韌性”和技術(shù)提供商進行認真細致的測試和設(shè)計的必要性。
CyberSaint公司CEO杰瑞·雷登對《財富》雜志表示,由于此次停機事件造成的經(jīng)濟影響巨大,因此追究責任時面臨巨大風險。他的公司進行的分析估計,此次停機事件僅僅給《財富》500強公司造成的營業(yè)損失就高達50億美元。
雷登認為,達美航空也要為其損失承擔一定責任。他說道:“他們必須要承擔一定的責任去了解環(huán)境,了解最大的風險是什么?!彼赋?,大多數(shù)組織認為遭到攻擊才是最大的網(wǎng)絡(luò)風險,但軟件更新漏洞也可能影響整體運營?!鞍沿熑稳繗w咎于Crowdstrike不公平?!?/p>
有人指出,微軟也應(yīng)該為此次停機承擔一定責任。許多人認為,此次停機的原因是Windows核心架構(gòu)的設(shè)計,可能導(dǎo)致惡意軟件、垃圾軟件和驅(qū)動程序不穩(wěn)定等問題。網(wǎng)絡(luò)安全專家、律師和前FBI探員埃里克·奧尼爾表示:“微軟不應(yīng)該給予第三方如此高的訪問權(quán)限。微軟可能辯稱這是技術(shù)或許可的工作方式,但這只是借口,因為同樣的問題并不影響Linux或Mac系統(tǒng)。而且Crowdstrike很早就發(fā)現(xiàn)了這個問題?!?/p>
在Crowdstrike的展臺,“T恤吧”的工作人員忙著操作設(shè)備,制作定制T恤衫,還有人在向訪客發(fā)放小盒子,里面裝著人們夢寐以求的擺件。這款擺件名為“水生熊貓”和“分散蜘蛛”,分別代表了著名的黑客組織和網(wǎng)絡(luò)罪犯。
一位正在排隊的安全研究人員表示,他不知道這些紀念品是什么,但聽說它們很受歡迎。似乎為了避免設(shè)定過高的預(yù)期,這位研究人員補充說,可能并不是什么特別精致的東西。他說道,畢竟“這家公司的股價已經(jīng)下跌了40%”。(財富中文網(wǎng))
譯者:劉進龍
審校:汪皓
Elvis, Britney, and Cher all found redemption in Las Vegas after going through a rocky phase.
This week, it was Crowdstrike’s turn.
The embattled cybersecurity company, whose buggy software update brought much of the world to a standstill last month, is enjoying a moment of strange cultural cachet at the annual Black Hat security conference, as throngs of visitors flock to its booth to snap selfies and load up on branded company shirts and other swag.
“My friend says I have to get one,” one person waiting in line by the Crowdstrike booth told Fortune, referring to the collectible figurines the company was offering.
For many, the newfound notoriety of the Crowdstrike name is part of the appeal.
Frank Flanagan, a senior security engineer for a large west coast chain of convenience stores and fuel stations, clad in a colorful shirt and cowboy hat, told Fortune he was in line strictly to get his hands on a figurine.
“I hope it will be worth more after a year,” he chuckled, and joked that the value would be even greater if the company were to go out of business as a result of the legal woes stemming from the flawed software update.
Crowdstrike’s stock has plunged roughly 40% since the incident, which caused computers running Microsoft Windows to display the dreaded “blue screen of death,” grounding thousands of flights and freezing systems at banks and hospitals around the globe. Delta has said Crowdstrike is solely responsible for cancelled flights that it claims cost it more than $500 million.
While many Black Hat attendees found amusement in the company’s brush with public notoriety, most of the people that Fortune spoke to at the event believed Crowdstrike was a solid and reputable company despite the incident. One Crowdstrike customer, a security professional at a restaurant chain, said he was very happy with the company’s response to the outage and that his company was quickly up and running again. Other attendees collectively shrugged at the idea that Crowdstrike could be blamed for a problem with a routine update that could happen to any of the security companies deeply intertwined with Microsoft Windows.
Steve Black, a professor of law and cybersecurity at Texas Tech University, pointed out that Delta’s argument against Crowdestrike is not a slam-dunk. There is a significant legal question about how much responsibility a business has for its own resilience, he said.
“Courts have been divided over the nature of digital harms,” said Black. “Does a plaintiff have to show financial harm to win?” A legal case will hinge on how dependent Delta was on the systems affected by the update, what its service agreement with Crowdstrike said, and what Delta’s remediation looked like. “If I delay, I may be responsible for some of the losses,” he said.
A CEO apology and hot-pressed T-shirts
If the Crowdstrike name seemed to be everywhere at the Black Hat conference, it wasn’t entirely due to the news cycle. In an ironic twist, Crowdstrike is one of the top sponsors of this year’s annual conference, eliciting occasional chuckles as its name is announced during panel sessions and displayed on large billboards.
“Adversaries aren’t stopping. Neither are we,” proclaims one oversized Crowdstrike advertisement above the indoor walk to the Mandalay Bay hotel conference convention center. “Resilience starts with us. Our focus remains with you.”
George Kurtz, the Crowdstrike CEO, spoke during a panel at the event and apologized to the audience for the debacle, according to the Washington Post. “George’s comments were brief but well said,” someone in the audience told the Post, noting that the comments got a warm reception, “which surprised me, given how critical the security community can be.”
The Crowdstrike incident was a frequent topic during the opening keynote panel session featuring Jen Easterly, the director of the U.S. Cybersecurity and Infrastructure Security Agency. Easterly said the widespread outage reinforced the need for “cyber resiliency” and diligent testing and designing by tech vendors.
Jerry Layden, CEO at CyberSaint, told Fortune that the stakes are high when it comes to placing blame for the outage, since the scale of the economic impact is so big. His company’s analysis estimated operational costs of the outage reaching $5 billion for the Fortune 500 alone.
Layden believes that Delta has some culpability for its losses. “They have to take some responsibility for understanding their environment, understanding where their biggest risks are,” he said, pointing out that most organizations think most about being attacked as the biggest cyber risk, but flaws in software updates can also impact the entire business. “Throwing it all on Crowdstrike is not fair.”
Others pointed out that Microsoft should take their fair share of the blame for the outage, which many say was caused by the design of Windows in its core architecture that leads to malware, spyware and driver instability. “Microsoft should not be giving any third party that level of access,” said Eric O’Neill, a cybersecurity expert, attorney and former FBI operative. “Microsoft will complain, well, it’s just the way that the technology works, or licensing works, but that’s bullshit, because this same problem didn’t affect Linux or Mac. And Crowdstrike caught it super-early.”
Back at the Crowdstrike booth, staffers busily operated machines to create custom-pressed shirts at the “T-Shirt bar,” while others handed out small boxes containing the coveted figurines. The figurines, dubbed “Aquatic Panda” and “Scattered Spider,” represent famous hacker groups and cyber criminals.
One security researcher in line said he didn’t know what the collectibles were, but hard heard they were a hot item. Then again, the researched added, as if to avoid setting his expectations too high, “they probably aren’t anything fancy.” After all, he said, “the company lost like 40% of its stock.”