Microsoft struck by Crowd Strike
Businesses worldwide are experiencing IT outages, such as Windows "blue screen of death" errors on their computers, in what has become one of the most widespread IT disruptions in recent years. The outage, which is linked to a software update from popular cybersecurity firm CrowdStrike, has impacted computers running Microsoft Windows in various sectors, including airlines, banks, retailers, brokerage houses, media companies, and railway networks. The travel sector appears to be one of the most severely affected, based on online discussions.
CrowdStrike's CEO, George Kurtz, confirmed in a post on X that a "defect" in a content update for Windows hosts caused the outage, ruling out a cyberattack. He also mentioned that the firm was rolling out a fix and that Mac and Linux hosts were not affected. Kurtz emphasized that it was not a security incident or cyberattack, and that the issue had been identified, isolated, and a fix had been deployed. He recommended that organizations communicate with CrowdStrike representatives through official channels and assured that the team was fully mobilized to ensure the security and stability of CrowdStrike customers.
A post on CrowdStrike's support forums, which are only accessible with a login, also acknowledged the issue early on Friday, stating that the company had received reports of crashes related to a content update. CrowdStrike mentioned that the crash reports were "related to the Falcon Sensor," its cloud-based security service that provides real-time threat detection, simplified management, and proactive threat hunting.
- A CrowdStrike subreddit moderator also mentioned that the company was aware of widespread reports of blue screen errors on Windows devices across multiple versions of its software
- The firm was investigating the cause of the errors
- Microsoft noted problems starting in the early hours of July 19
- Microsoft 365 for Consumers is now back up, but enterprise apps are still seeing disruption
- Microsoft spokesperson stated that the issue affecting Windows devices was due to an update from a third-party software platform
- The Microsoft 365 service disruption overnight July 18 to 19 was unrelated to the widespread outage triggered by the CrowdStrike update
- There will be a lot of questions to ask and answer about resilience in cloud services
- Cybersecurity products have to clear a higher bar of reliability and security in customer deployments
- Goldman Sachs analysts wrote in a research note that this will reinforce the barrier to entry in the industry
- Airlines and airports across several countries are reporting problems with check-in and ticketing systems
- U.S. federal airspace officials declared a nationwide halt of air traffic on Friday due to the outages, which could impact the climate, according to experts speaking to iTechnica.pk.
- The London Stock Exchange in the U.K. experienced disruptions, while several doctors’ offices in the U.K. reported that the outage had affected the National Health Service’s clinical computer system and appointment scheduling.
- In the U.S., some 911 and non-emergency call centers appeared to be impacted, with Alaska State Troopers noting issues with call centers across the State of Alaska.
- U.K. news broadcaster Sky News encountered difficulties broadcasting live due to the outage, as reported by the firm’s executive chairman David Rhodes on Twitter. Banking services in New Zealand and broadcasting problems for several Indian news channels were also reported.
- Many employees of various companies reported being unable to start their computers due to the issue, which occurred after Microsoft confirmed service problems with its Microsoft 365 apps late on Thursday, affecting airlines such as Delta and United.
- Misinformation has been spreading amid the chaos, including reports of the Las Vegas Sphere displaying a blue screen of death.
- Before CrowdStrike acknowledged its role in the crash, businesses and security experts began to point fingers at the company on Friday, with rivals potentially standing to gain from the situation, according to experts speaking to iTechnica.pk.
CrowdStrike's client base includes almost 60% of Fortune 500 companies and over half of the Fortune 1,000, as stated on its website. The company's services are utilized by eight out of the top 10 financial services firms and an equal number of prominent tech companies. Additionally, CrowdStrike has established a significant presence in the healthcare and manufacturing sectors, catering to six and seven of the top 10 companies in each industry, respectively.