# CrowdStrike BSOD Fiasco with Katie Moussouris

- Show: [Oxide and Friends](https://hardwarepodcasts.com/podcast/oxide-and-friends)
- Published: 2024-07-25
- Length: 1h 41m
- Episode: 19
- Page: https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris
- Listen: https://share.transistor.fm/s/0e8502c6

## Summary

Security expert Katie Moussouris joins Bryan Cantrill and Adam Leventhal to analyze the CrowdStrike outage, discussing the technical failure of a kernel-mode driver update that caused global Blue Screen of Death crashes. The conversation explores the role of the Cyber Safety Review Board (CSRB) in investigating such incidents, the challenges of software liability, and the complexities of securing ubiquitous third-party security tools. Moussouris also shares insights on her career, including pioneering Microsoft's bug bounty program and the limitations of open-source security models.

## Chapters

- [0:00](https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris#t=0) Introduction and Context of the Outage
- [13:53](https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris#t=833) Technical Analysis of the Kernel Panic
- [30:39](https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris#t=1839) The Role of the Cyber Safety Review Board
- [27:32](https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris#t=1652) Software Liability and Legal Implications
- [44:27](https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris#t=2667) CrowdStrike's Response and Testing Failures
- [52:22](https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris#t=3142) Security Culture and Key Management
- [1:14:02](https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris#t=4442) Pioneering Bug Bounties at Microsoft
- [1:27:18](https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris#t=5238) Open Source Security and Future Recommendations

## Topics

- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Policy, trade & tariffs](https://hardwarepodcasts.com/topic/policy-trade-and-tariffs)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Growth, exits & acquisitions](https://hardwarepodcasts.com/topic/growth-exits-and-acquisitions)

## Most relevant to

large enterprises

## Mentioned

- CrowdStrike (company)
- Microsoft (company)
- Cyber Safety Review Board (other)
- Log4j (other)
- SolarWinds (company)
- Clubhouse (company)
- OpenSSH (other)
- Rust (other)

## Related episodes from other shows

- [Finding Hardware Flaws with Laura Abbott](https://hardwarepodcasts.com/podcast/the-amp-hour/2022-05-23-finding-hardware-flaws-with-laura-abbott) (The Amp Hour)
- [192. Karsten Roscher & The Need For Safe AI (Interview)](https://hardwarepodcasts.com/podcast/the-next-byte-podcast/2024-09-17-192-karsten-roscher-the-need-for-safe-ai-interview) (The Next Byte Podcast)
- [166: Sardine Tornado](https://hardwarepodcasts.com/podcast/embedded-fm/2016-08-31-166-sardine-tornado) (Embedded.fm)
- [140 - Medical Device & Diagnostics Cybersecurity, 3rd Party Software, SBOM's, Evaluating Skill and Mindset with Christian Espinosa](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating) (Let's Combinate)
- [141: Malevolent and Trying to Trick You](https://hardwarepodcasts.com/podcast/embedded-fm/2016-03-02-141-malevolent-and-trying-to-trick-you) (Embedded.fm)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/oxide-and-friends/2024-07-25-crowdstrike-bsod-fiasco-with-katie-moussouris. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Oxide and Friends.