Microsoft calls cybersecurity summit following widespread system outages

Following a significant system failure triggered by a CrowdStrike software update, Microsoft has announced a cybersecurity summit scheduled for September. The event will focus on recent disruptions affecting global companies, including airlines, banks, and healthcare providers.

On July 19, 2024, a faulty CrowdStrike antivirus update caused massive disruptions, forcing companies like Delta Airlines to cancel numerous flights and face massive financial losses, reportedly around $550 million. The glitch not only affected airlines, but also delayed shipments for logistics companies and disrupted scheduled hospital appointments.

In response, Microsoft plans to host discussions at its Redmond, Washington, campus with CrowdStrike and other leading security companies on September 10. The summit, called Windows Endpoint Security Ecosystem Summit, aims to address these challenges and explore solutions to improve system resilience.

A key topic will be the strategic shift from kernel mode to user mode in Windows applications. This move is expected to isolate system processes, reducing the risk of widespread crashes. Kernel mode, which provides deeper access to the system, was identified as a vulnerability during the incident, as it allowed the flawed update to compromise entire systems.

The summit will also cover innovative technologies like eBPF and the adoption of memory-safe programming languages ​​like Rust, which Microsoft has actively supported through significant donations to the Rust Foundation.

This event marks a critical step for Microsoft as it navigates the competitive landscape of cybersecurity solutions, including its Defender for Endpoint product. The discussions are designed to foster a collaborative environment with no preferential treatment for any participant, including internal Microsoft teams.

Further updates on the outcomes of this cybersecurity summit will be communicated after the event, ensuring that stakeholders and the public are informed about the progress made in preventing future disruptions.