Comment

Comment on TSA silent on CrowdStrike’s claim Delta skipped required security update

jaybone@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

Wait I thought this was caused by a security update.

Are they saying there was a security update that would have prevented the CrowdStrike update from bricking everything?

Sort:hotnew top

jeffw@lemmy.world ⁨2⁩ ⁨weeks⁩ ago
Different security step.

In March 2023, the TSA added a cybersecurity emergency amendment to its cybersecurity programs. The amendment required airlines like Delta to develop “policies and controls to ensure that operational technology systems can continue to safely operate in the event that an information technology system has been compromised,” CrowdStrike’s complaint said.

source
- jaybone@lemmy.world ⁨2⁩ ⁨weeks⁩ ago
  Yeah I read it. So is CrowdStrike going to argue that some other software update was supposed to have been installed by Delta prior to CrowdStrike’s update?
  
  That’s my question.
  
  source
  - Pika@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago
    No they are going to argue that there should have been a fail safe in place for a rapid recovery of said incident occurring in the first place.
    
    source