I mean, we've seen impacts of these unstaged updates in the deeper layers of banks, airports and hospitals. It's unfair that CrowdStrike gets more than half the blame here.

Not to mention, probably half these companies were actually forced to install this. Getting SOC2 is essentially letting a senior-branded KPMG or EY intern tell you how to enforce security policies based on their checklist.

There is far more to blame in this incident than CrowdStrike themselves.