CrowdStrike Error Hit 8.5 Million Devices & Many Businesses

It’s been a strange weekend for the world after having witnessed one of the biggest IT outages in history on Friday.

What was initially mentioned as a fault with Microsoft Windows operating system leading to its “blue screen of death”, was eventually reported to be an error caused by cybersecurity giant CrowdStrike. TechDogs covered the key information of the cause, the initial problems faced by businesses and what the company’s CEO said.

Its reason was narrowed down to one problematic file that came bundled in a software update from CrowdStrike being made to its flagship security product, Falcon Sensor.

Social media was buzzing with posts, memes, images and news about one small rogue file causing disruptions on a global scale affecting millions of individuals and working professionals along with numerous businesses.

The fix came in the form of the company deploying a reverted file to curb the damage.

However, there was already major damage done and businesses were left to deal with its aftermath too.

So, let’s explore how businesses were affected and what they had to deal with!

How Were Businesses Affected?

From airlines to shipping, from finance to healthcare, numerous businesses across a wide range of industries were affected by the CrowdStrike incident.
Airlines witnessed large scale delays and cancellations across the world, with just 2,200 flights cancelled and around 7,000 delayed in the US alone and only pertaining to the day of the incident.
This in addition to the directive by US airspace officials that included a nationwide grounding of all flights.
While airlines such as United Airlines and Delta Air Lines were hit on the main day, Delta were forced to cancel more than 600 flights on Monday after reeling from the incident and struggling to restore operations.
This took Delta’s total number of cancellations to over 5,000, leaving commuters to rent cars and drive hundreds of miles.
Airports around the world were in similar situations, including Australia, New Zealand, UK, India, South Africa, Israel, Germany and others, with some issuing handwritten boarding passes.
Ahead of this, businesses were dealing with cancelled meetings, orders, medical appointments and more.
The global outage even impacted automotive giant Tesla, which witnessed some production lines being paused.
Tesla CEO Elon Musk posted on X saying, “We just deleted CrowdStrike from all our systems, so no rollouts at all,” in response to another post which read “I guess CrowdStrike doesn’t do staged rollouts?”
“This gave a seizure to the automotive supply chain,” is what Musk’s reply to a post on X by Satya Nadella, Microsoft’s Chairman and CEO, which addressed the problem was.
In the financial sector, industry giant JPMorgan Chase was also troubled by the incident, with many of its ATMs down.
Meta, the company behind Facebook, Instagram and WhatsApp said some of its external vendors who moderate content on its platforms were unable to perform their duties.

TechDogs-"An Image Of An Affected Airport During The Incident"

Source

While Microsoft was the primary perpetrator of the problem, it was eventually corrected to CrowdStrike. Yet, Microsoft communicated with customers, shifted resources to do what they could and issued a statement clarifying the incident.

What Did Microsoft Say?

At the heart of the incident stood Microsoft, which released a blog post aimed to help its customers through the troubles, saying it had “deployed hundreds of engineers and experts to work directly with customers to restore services.”
The company also mentioned that it estimated that 8.5 million devices were affected by the incident, which interestingly comprises of less than 1% of all Windows machines. However, it was enough to bring the world to a standstill.
CrowdStrike also helped Microsoft develop a “scalable solution” enabling Microsoft’s Azure Infrastructure to accelerate a fix.
Yet, it managed to show CrowdStrike one silver lining – that its services were used by so many prestigious organizations.
Microsoft also noted that the incident “demonstrates the interconnected nature of our broad ecosystem,” while concluding by saying “As we’ve seen over the last two days, we learn, recover and move forward most effectively when we collaborate and work together.”

What Did Experts Say?

Many experts believe that without stricter standards, increased contingencies and effective backup plans, such incidents are likely to happen again. Moreover, the next time it happens, the issues and aftereffects could be worse.
Following the incident, Australia’s cyber intelligence agency issued a warning saying that bad actors were trying to spread “malicious websites and unofficial code” as fixes for the incident.
Nigel Phair, a cybersecurity professor at Australia’s Monash University, said, “I'm sure the regulators globally are looking at this. There is limited competition globally for operating systems, for example, and also for the large-scale cybersecurity products like the ones CrowdStrike provides.”
Some experts even believe that the update that caused the incident didn’t undergo adequate checks before it was released. The update was meant to enhance security against threats.
While CrowdStrike’s shares fell 11% on Friday, it dipped further down 13% on Monday.
The company which has been desirable to investors, owing to its customer base of 30,000 subscribers globally, could be facing a drop in interest from investors and customers.
Guggenheim analysts said, “We don't believe it will materially affect renewals, at least not in the short term ... However, we do think this will at least delay deal signings, if not cause some losses in closely contested deals.”
On the other hand, insurance industry experts mentioned insurers are anticipating a surge in business interruption claims.
Ryan Griffin, a partner focused on cyber at insurance broker McGill and Partners, said, “Insurers are bracing for hundreds, if not thousands, of claim notifications from organizations that are impacted by the CrowdStrike event.”

Prior to this incident, CrowdStrike updates also caused Linux machine outages in April.

Do you think software developed by companies should be held to higher standards of testing before deploying updates. Do you think such updates should be required to pass through government agencies?

Let us know in the comments below!

First published on Mon, Jul 22, 2024

Liked what you read? That’s only the tip of the tech iceberg!

Explore our vast collection of tech articles including introductory guides, product reviews, trends and more, stay up to date with the latest news, relish thought-provoking interviews and the hottest AI blogs, and tickle your funny bone with hilarious tech memes!

Plus, get access to branded insights from industry-leading global brands through informative white papers, engaging case studies, in-depth reports, enlightening videos and exciting events and webinars.

Dive into TechDogs' treasure trove today and Know Your World of technology like never before!

Disclaimer - Reference to any specific product, software or entity does not constitute an endorsement or recommendation by TechDogs nor should any data or content published be relied upon. The views expressed by TechDogs' members and guests are their own and their appearance on our site does not imply an endorsement of them or any entity they represent. Views and opinions expressed by TechDogs' Authors are those of the Authors and do not necessarily reflect the view of TechDogs or any of its officials. All information / content found on TechDogs' site may not necessarily be reviewed by individuals with the expertise to validate its completeness, accuracy and reliability.

Tags:

Enterprise Solutions Microsoft CrowdStrike Falcon Outage Windows Error Microsoft 365 Blue Screen Of Death Cybersecurity Defect Update Meta Tesla Delta Air Lines United Airlines Insurance JPMorgan Chase Investment Bad Actor

Join The Discussion

Enterprise Solutions