Current:Home > ScamsCrowdStrike shares details on cause of global tech outage-Angel Dreamer Wealth Society D1 Reviews & Insights
CrowdStrike shares details on cause of global tech outage
View Date:2024-12-25 01:33:44
Last week’s global tech outage has been traced back to a bug in U.S. cybersecurity firm CrowdStrike’s quality control system.
The outage’s impacts have been far-reaching, affecting roughly 8.5 million Windows devices and disrupting banks, emergency call centers and airlines. Fortune 500 companies – not including Microsoft – face an estimated $5.4 billion in losses from the outage, according to insurer Parametrix. Meanwhile, hackers have used the outage as an opportunity to target CrowdStrike customers.
“The fact that a proper analysis wasn't done ended up having this huge cascading problem that companies are still dealing with today,” said Scott White, an associate professor and director of the cybersecurity program and cyber academy at George Washington University in Washington, D.C.
What was the cause of the IT outage?
Early in the day Friday, CrowdStrike pushed out what was supposed to be a routine software update to help monitor for possible emerging threats. But the update was “problematic," triggering a memory problem that set off Window's "Blue Screen of Death," according to the firm's preliminary post incident review. Mac and Linux hosts were not affected.
The software "attempted to do something Windows couldn’t process, and the system crashed as a result,” according to Dominic Sellitto, clinical assistant professor of management science and systems at the University at Buffalo School of Management in New York.
CrowdStrike said it has a "content validator" review software updates before launch, but the program missed the update's problematic content due to a bug.
“On Friday we failed you, and for that I'm deeply sorry,” wrote CrowdStrike Chief Security Officer Shawn Henry in a Monday LinkedIn post, adding that "thousands of our team members have been working 24/7 to get our customer systems fully restored."
The firm told USA TODAY it sent Uber Eats gift cards to teammates and partners who have been helping customers. TechCrunch reported that some recipients have had trouble accessing the gift, and CrowdStrike confirmed that Uber flagged the gift cards as fraud "because of high usage rates."
What happens next for CrowdStrike?
CrowdStrike said it plans to improve its testing, give customers more control over when updates are installed and stagger future software updates to its “Rapid Response” content.
Gregory Falco, assistant professor of engineering at Cornell University in New York, described the steps as "good software deployment and engineering practices." Some cybersecurity experts are questioning why certain safeguards weren’t in place before the tech outage.
“It’s easy to be an armchair expert, but there are best practices at play here that probably should have been in place sooner,” Sellitto said, adding that he gives CrowdStrike credit for their quick response to the outage.
Nikolas Behar, an adjunct professor of cybersecurity at the University of San Diego, said it was a surprise to see the outage tied to CrowdStrike – “one of the best, if not the best” cybersecurity firms in the country.
“They talked about how they're putting more checks into place in order to prevent this from happening again. But they were already supposed to have checks in the first place,” Behar said.
The U.S. House of Representatives Homeland Security Committee has sent a letter asking CrowdStrike CEO George Kurtz to testify on the outage.
“We cannot ignore the magnitude of this incident, which some have claimed is the largest IT outage in history,” the letter reads, adding that Americans will “undoubtedly feel the lasting, real-world consequences of this incident” and “deserve to know in detail how this incident happened and the mitigation steps CrowdStrike is taking.”
'Painful' wake-up call:What's next for CrowdStrike, Microsoft after update causes outage?
CrowdStrike said it plans to release a full analysis on the cause of Friday’s disruption once its investigation is complete. Experts who spoke to USA TODAY said they hope future reports shed more light on the decision-making process that allowed the bug to impact millions of devices.
“You hope that the producers are doing their due diligence. And I have to wait to see what their explanation is,” White of George Washington University said. “I don't care that you found the glitch. My problem is, why did the glitch hit the marketplace at all? And that's what seems to be missing here.”
Reuters contributed to this report.
veryGood! (27)
Related
- Watch a rescuer’s cat-like reflexes pluck a kitten from mid-air after a scary fall
- Mung bean omelet, anyone? Sky high egg prices crack open market for alternatives
- For a Climate-Concerned President and a Hostile Senate, One Technology May Provide Common Ground
- 4 ways around a debt ceiling crisis — and why they might not work
- Chet Holmgren injury update: Oklahoma City Thunder star suffers hip fracture
- See How Gwyneth Paltrow Wished Ex Chris Martin a Happy Father’s Day
- Simon says we're stuck with the debt ceiling (Encore)
- Elon Musk has lost more money than anyone in history, Guinness World Records says
- Lululemon, Disney partner for 34-piece collection and campaign: 'A dream collaboration'
- NPR and 'New York Times' ask judge to unseal documents in Fox defamation case
Ranking
- Lost luggage? This new Apple feature will let you tell the airline exactly where it is.
- And Just Like That Costume Designer Molly Rogers Teases More Details on Kim Cattrall's Cameo
- Coronavirus: When Meeting a National Emissions-Reduction Goal May Not Be a Good Thing
- Judge Scales Back Climate Scientist’s Case Against Bloggers
- Sister Wives’ Meri Brown Shares Hysterical Farmers Only Dating Profile Video After Kody Split
- Divers say they found body of man missing 11 months at bottom of Chicago river
- Why higher winter temperatures are affecting the logging industry
- Justice Department reverses position, won't support shielding Trump in original E. Jean Carroll lawsuit
Recommendation
-
See Leonardo DiCaprio's Transformation From '90s Heartthrob to Esteemed Oscar Winner
-
Trump’s Interior Department Pressures Employees to Approve Seismic Testing in ANWR
-
A Complete Timeline of Teresa Giudice's Feud With the Gorgas and Where Their RHONJ Costars Stand
-
3 dead, multiple people hurt in Greyhound bus crash on Illinois interstate highway ramp
-
Horoscopes Today, November 9, 2024
-
This AI expert has 90 days to find a job — or leave the U.S.
-
Florida Power CEO implicated in scandals abruptly steps down
-
How to deal with your insurance company if a hurricane damages your home