You may have heard about the recent vulnerabilities associated with the security monitoring tool from Crowdstrike, called “Falcon Sensor”, which led to substantial outage affecting over 8.5 million windows machines and requires manual intervention to recover affected systems. These events have highlighted critical issues with security monitoring tools that operate at the operating system level and are highly permissive, leading to potential vulnerabilities.
Why Paradyn Remained Unaffected
At Paradyn, we have always prioritised security and methodical practices. Here’s why our systems stood strong:
- Stringent Security Practices: From the ground up, our security framework is designed to minimise risks. We employ rigorous and methodical security practices that go beyond industry standards.
- Selective Use of Monitoring Tools: While we acknowledge the role of widely used security monitoring tools from Crowdstrike, we have been cautious about their implementation. We recognised that tools like Crowdstrike, despite their utility, posed significant risks due to their high level of permissiveness and their deep integration into operating systems.
- Secure Linux VMs: Our choice to deploy highly secure Linux Virtual Machines (VMs) has proven to be a critical decision. These VMs provide a robust, secure environment that isolates and protects our systems from the vulnerabilities that affected other platforms.
- Proactive Risk Management: Our proactive approach to risk management involves continuously evaluating and mitigating potential security threats. This foresight has enabled us to avoid the pitfalls that impacted others.