A general view from D\u00fcsseldorf Airport as passengers gather and wait due to the global communications outage caused by CrowdStrike, which provides cybersecurity services to U.S. technology company Microsoft, on July 19, 2024, in D\u00fcsseldorf, Germany.<\/p>\n
Security experts believe that the routine update of CrowdStrike\u2019s widely used cybersecurity software, which caused a global system crash on Friday, likely did not undergo adequate quality checks before its deployment. This latest version of the Falcon Sensor software was intended to enhance security for CrowdStrike clients by updating threat defenses, but instead, it resulted in one of the most extensive tech outages in recent history for companies using Microsoft\u2019s Windows operating system.<\/p>\n
The outage disrupted operations at global banks, airlines, hospitals, and government offices. While CrowdStrike quickly released information to fix the affected systems, experts warned that recovery would take time due to the need to manually eliminate the flawed code.<\/p>\n
Steve Cobb, Chief Security Officer at Security Scorecard, commented, \u201cWhat it looks like is, potentially, the vetting or the sandboxing they do when they look at code, maybe somehow this file was not included in that or slipped through.\u201d Security Scorecard also experienced impacts from the issue.<\/p>\n
Problems surfaced soon after the update\u2019s rollout on Friday, with users posting images on social media of their computers displaying the dreaded \u201cblue screen of death\u201d error messages. Patrick Wardle, a security researcher specializing in operating system threats, analyzed the code and identified the source of the outage.<\/p>\n
\u201cThe update\u2019s problem was in a file that contains either configuration information or signatures,\u201d Wardle explained. These signatures are used to detect specific types of malicious code or malware.<\/p>\n
Wardle noted that the frequent updates, intended to keep clients protected from the latest threats, might have contributed to the lack of thorough testing. \u201cIt\u2019s very common that security products update their signatures, like once a day\u2026 because they\u2019re continually monitoring for new malware and want to make sure their customers are protected,\u201d he said. This frequency may have led to the oversight.<\/p>\n
John Hammond, Principal Security Researcher at Huntress Labs, emphasized the importance of gradual rollouts. \u201cIdeally, this would have been rolled out to a limited pool first,\u201d he said, suggesting that such an approach could have prevented the widespread disruption.<\/p>\n
Similar incidents have occurred in the past. For instance, a buggy antivirus update from McAfee in 2010 stalled hundreds of thousands of computers. However, the global impact of the CrowdStrike outage underscores the company\u2019s market dominance. Over half of Fortune 500 companies and various government bodies, including the Cybersecurity and Infrastructure Security Agency (CISA), rely on CrowdStrike\u2019s software.<\/p>\n
The incident serves as a stark reminder of the critical importance of rigorous quality checks in cybersecurity updates to prevent large-scale disruptions. As businesses and government agencies work to recover, the focus will likely shift to ensuring such oversights do not happen again.<\/p>\n","protected":false},"excerpt":{"rendered":"
Faulty Update in Falcon Sensor Software Disrupts Banks, Airlines, and Hospitals<\/p>\n","protected":false},"author":331,"featured_media":47943,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[14986,966,14985,5067],"class_list":["post-47942","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech","tag-crowdstrike","tag-microsoft","tag-outage","tag-software-update"],"reading_time":"3 min read","_links":{"self":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts\/47942","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/users\/331"}],"replies":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/comments?post=47942"}],"version-history":[{"count":0,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts\/47942\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/media\/47943"}],"wp:attachment":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/media?parent=47942"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/categories?post=47942"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/tags?post=47942"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}