Lesson from Crowdstrike Outage: Immutable OS — Preventative vs Reactive Computing

Recent cybersecurity incidents like Crowdstrike’s outage have highlighted a glaring issue in many organizations’ security strategies — reactive security measures that fail to prevent attacks effectively. A significant example is this Crowdstrike event or recent ransomware on one of the largest credit unions, or AT&T which exposed the vulnerabilities of an outdated, reactive approach to cybersecurity. As we face an era of “Zero Hour” threats, it’s clear that a shift to a preventative security posture is not just necessary but urgent.

The Cost of Complacency:

Maintaining the “status quo” architecture through Managed Detection and Response (MDR) and Extended Detection and Response (XDR) solutions costs an average of $50-$70 per desktop annually. This approach requires ongoing patch management at the endpoint, perpetuating a reactive stance. As we’ve seen, this model is insufficient against the rapidly evolving threat landscape. The cure — automated patching — has proven to be as problematic as the disease, leading to significant vulnerabilities.

The Call for Change:

The reactionary stance on cybersecurity invites an endless battle against unknown threats. In contrast, a preventative approach offers a more straightforward, binary choice: implement robust, immutable defenses now to avoid future breaches. The recent ransomware event at a major credit union is a stark reminder of the dangers of IT complacency and the necessity for a proactive security strategy.

A New Frontline:

Transitioning to an immutable frontline means adopting technologies that support a preventative posture. Partners like Lenovo , Oracle , IGEL Technology , and Kasm Technologies are at the forefront of this shift, offering solutions that reduce the reliance on complex, costly security controls at the endpoint. This approach lowers costs and minimizes the computing and network requirements.

Modern Solutions for Modern Problems:

This transformation is not about starting over but about modernizing existing systems. Moving to a preventative architecture can be achieved in days, not months or years. Current business pressures, such as migrating to Windows 11 or a “Cloud PC” initiative, can serve as catalysts for this change. Managed Device Lifecycle Services providers can facilitate the transition, enabling businesses to reduce, reuse, and replace their existing fleet with thin clients or low-powered endpoints.

Implementing a “Read Only OS” like IGEL on endpoints that connect to Kasm Workspaces provides an immutable container with integrated Data Loss Prevention (DLP). This setup reduces endpoint risk while delivering secure applications across various operating systems. Minimal patching is required, and updates can be managed centrally without the need for individual endpoint visits.

The Benefits of a Preventative Posture:

1. Cost Reduction: Lower infrastructure and maintenance costs.
2. Enhanced Security: Immutable containers and read-only OS significantly reduce vulnerabilities.
3. Simplified Management: Centralized patching and rollback capabilities streamline operations.
4. Increased Trust: Adopting frameworks like the Cybersecurity Maturity Model Certification (CMMC) can enhance trust and accountability.

Conclusion:

Defending against ransomware is challenging, but explaining to stakeholders why your organization wasn’t protected is even harder. The recent incidents have highlighted the weaknesses of IT complacency and the urgent need for a shift to a preventative security posture. The world is watching, and our global interconnectivity demands a higher level of accountability. By adopting modern, preventative measures and frameworks like CMMC, organizations can build more trust and ensure that catastrophic events like the one on July 19th, 2024, do not happen again.

It’s time to reevaluate your endpoint strategy. The stakes are high, but the tools and frameworks to protect your organization are within reach. Embrace the change, move towards a preventative security posture, and safeguard your future.