When computer screens turned blue worldwide on Friday, flights were grounded, hotel check-ins halted, and freight deliveries stalled. Businesses reverted to using paper and pen, initially suspecting a cyberterrorist attack. The actual cause, however, was a mundane yet impactful botched software update from cybersecurity firm CrowdStrike.<\/p>\n
Understanding the CrowdStrike Outage<\/strong><\/p>\n \u201cIn this case, it was a content update,\u201d explained Nick Hyatt, Director of Threat Intelligence at security firm Blackpoint Cyber. Due to CrowdStrike\u2019s extensive customer base, the impact was felt globally.<\/p>\n \u201cOne mistake has had catastrophic results. This highlights how intertwined modern society is with IT \u2014 from coffee shops to hospitals to airports, a mistake like this has massive ramifications,\u201d Hyatt noted.<\/p>\n The content update affected CrowdStrike\u2019s Falcon monitoring software, which is designed to detect malware and other malicious behavior on endpoints like laptops, desktops, and servers. Falcon\u2019s auto-update feature inadvertently rolled out buggy code, leading to widespread disruption. \u201cAuto-update capability is standard in many software applications, and isn\u2019t unique to CrowdStrike. It\u2019s just that due to what CrowdStrike does, the fallout here is catastrophic,\u201d Hyatt added.<\/p>\n Addressing the Fallout<\/strong><\/p>\n Although CrowdStrike quickly identified and addressed the problem, restoring many systems within hours, the damage was not easily reversed for organizations with complex systems.<\/p>\n \u201cWe think it will take three to five days before things are fully resolved,\u201d said Eric O\u2019Neill, a former FBI counterterrorism operative and cybersecurity expert. He pointed out that the timing of the outage \u2014 a summer Friday \u2014 compounded the problem, with many offices empty and IT support scarce.<\/p>\n Lessons Learned: Incremental Updates and Better Safeguards<\/strong><\/p>\n O\u2019Neill emphasized the importance of incremental updates. \u201cWhat CrowdStrike was doing was rolling out its updates to everyone at once. That is not the best idea. Send it to one group and test it. There are levels of quality control it should go through,\u201d he said.<\/p>\n Peter Avery, Vice President of Security and Compliance at Visual Edge IT, echoed this sentiment, advocating for more rigorous testing in varied environments before widespread release. \u201cYou need the right checks and balances in companies. It could have been a single person that decided to push this update, or somebody picked the wrong file to execute on,\u201d Avery said.<\/p>\n The IT industry terms this a single-point failure \u2014 an error in one part of a system causing a technical disaster across interconnected networks and industries.<\/p>\n Building Resilient IT Systems<\/strong><\/p>\n The event has prompted calls for heightened cyber preparedness among companies and individuals. \u201cThe bigger picture is how fragile the world is; it\u2019s not just a cyber or technical issue. There are many phenomena, like solar flares, that can cause an outage,\u201d Avery said.<\/p>\n Javad Abed, an assistant professor of information systems at Johns Hopkins Carey Business School, emphasized the need for businesses to build redundancy into their systems. \u201cA single point of failure shouldn\u2019t be able to stop a business, and that is what happened. You can\u2019t rely on only one cybersecurity tool,\u201d Abed said. While building redundancy is costly, the alternative \u2014 as evidenced by the recent outage \u2014 is more expensive.<\/p>\n \u201cI hope this is a wake-up call, and I hope it causes some changes in the mindsets of business owners and organizations to revise their cybersecurity strategies,\u201d Abed added.<\/p>\n Kernel-Level Code and Systemic Challenges<\/strong><\/p>\n Nicholas Reese, a former Department of Homeland Security official and instructor at New York University\u2019s SPS Center for Global Affairs, highlighted the systemic issues within enterprise IT. Often, cybersecurity, data security, and tech supply chains are viewed as \u201cnice-to-have\u201d rather than essential.<\/p>\n On a micro level, the disruptive code was kernel-level, affecting every aspect of computer hardware and software communication. \u201cKernel-level code should get the highest level of scrutiny,\u201d Reese said, advocating for separate approval and implementation processes with strict accountability.<\/p>\n The broader challenge lies in managing third-party vendor products, all with potential vulnerabilities. \u201cHow do we look across the ecosystem of third-party vendors and see where the next vulnerability will be? It is almost impossible, but we have to try,\u201d Reese said. He stressed the importance of backup and redundancy, acknowledging the difficulty businesses face in justifying the cost of preparing for hypothetical scenarios.<\/p>\n The CrowdStrike incident underscores the critical need for robust risk management and contingency planning. As the industry moves forward, balancing regulation with market-driven solutions will be key to enhancing the security and resilience of global IT infrastructures.<\/p>\n","protected":false},"excerpt":{"rendered":" CrowdStrike CEO on Global Outage: Goal Now is to Ensure Every Customer is Back Up and Running<\/p>\n","protected":false},"author":331,"featured_media":47951,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[14986,966,14985],"class_list":["post-47950","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech","tag-crowdstrike","tag-microsoft","tag-outage"],"reading_time":"4 min read","_links":{"self":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts\/47950","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/users\/331"}],"replies":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/comments?post=47950"}],"version-history":[{"count":0,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/posts\/47950\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/media\/47951"}],"wp:attachment":[{"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/media?parent=47950"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/categories?post=47950"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.businessupturn.com\/usa\/wp-json\/wp\/v2\/tags?post=47950"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}