NATIONAL NEWS

How a faulty CrowdStrike update crashed computers around the world

Jul 20, 2024, 11:00 AM

CHICAGO, ILLINOIS - JULY 19: Flight information screens display a recovery window in the second ter...

CHICAGO, ILLINOIS - JULY 19: Flight information screens display a recovery window in the second terminal at Chicago O'Hare International Airport on July 19, 2024 in Chicago, Illinois. Businesses including airlines worldwide were affected by a global technology outage that was attributed to a software update issued by CrowdStrike, a cybersecurity firm whose software is used by many industries around the world. (Photo by Anna Moneymaker/Getty Images)

(Photo by Anna Moneymaker/Getty Images)

Airlines, banks, hospitals and other risk-averse organizations around the world chose cybersecurity company CrowdStrike to protect their computer systems from hackers and data breaches.

But all it took was one faulty CrowdStrike software update to cause global disruptions Friday that grounded flights, knocked banks and media outlets offline, and disrupted hospitals, retailers and other services.

“This is a function of the very homogenous technology that goes into the backbone of all of our IT infrastructure,” said Gregory Falco, an assistant professor of engineering at Cornell University. “What really causes this mess is that we rely on very few companies, and everybody uses the same folks, so everyone goes down at the same time.”

The trouble with the update issued by CrowdStrike and affecting computers running Microsoft’s Windows operating system was not a hacking incident or cyberattack, according to CrowdStrike, which apologized and said a fix was on the way.

But it wasn’t an easy fix. It required “boots on the ground” to remediate, said Gartner analyst Eric Grenier.

“The fix is working, it’s just a very manual process and there’s no magic key to unlock it,” Grenier said. “I think that is probably what companies are struggling with the most here.”

While not everyone is a client of CrowdStrike and its platform known as Falcon, it is one of the leading cybersecurity providers, particularly in transportation, health care, banking and other sectors that have a lot at stake in keeping their computer systems working.

After airline outage mess, SLC airport travelers finally make it home

“They’re usually risk-averse organizations that don’t want something that’s crazy innovative, but that can work and also cover their butts when something goes wrong. That’s what CrowdStrike is,” Falco said. “And they’re looking around at their colleagues in other sectors and saying, ‘Oh, you know, this company also uses that, so I’m gonna need them, too.’”

Worrying about the fragility of a globally connected technology ecosystem is nothing new. It’s what drove fears in the 1990s of a technical glitch that could cause chaos at the turn of the millennium.

“This is basically what we were all worried about with Y2K, except it’s actually happened this time,” wrote Australian cybersecurity consultant Troy Hunt on the social platform X.

Across the world Friday, affected computers were showing the “blue screen of death” — a sign that something went wrong with Microsoft’s Windows operating system.

But what’s different now is “that these companies are even more entrenched,” Falco said. “We like to think that we have a lot of players available. But at the end of the day, the biggest companies use all the same stuff.”

Founded in 2011 and publicly traded since 2019, CrowdStrike describes itself in its annual report to financial regulators as having “reinvented cybersecurity for the cloud era and transformed the way cybersecurity is delivered and experienced by customers.” It emphasizes its use of artificial intelligence in helping to keep pace with adversaries. It reported having 29,000 subscribing customers at the start of the year.

The Austin, Texas-based firm is one of the more visible cybersecurity companies in the world and spends heavily on marketing, including Super Bowl ads. At cybersecurity conferences, it’s known for large booths displaying massive action-figure statues representing different state-sponsored hacking groups that CrowdStrike technology promises to defend against.

CrowdStrike CEO George Kurtz is among the most highly compensated in the world, recording more than $230 million in total compensation in the last three years. Kurtz is also a driver for a CrowdStrike-sponsored car racing team.

After his initial statement about the problem was criticized for lack of contrition, Kurtz apologized in a later social media post Friday and on NBC’s “Today Show.”

“We understand the gravity of the situation and are deeply sorry for the inconvenience and disruption,” he said on X.

Richard Stiennon, a cybersecurity industry analyst, said this was a historic mistake by CrowdStrike.

“This is easily the worst faux pas, technical faux pas or glitch of any security software provider ever,” said Stiennon, who has tracked the cybersecurity industry for 24 years.

While the problem is an easy technical fix, he said, it’s impact could be long-lasting for some organizations because of the hands-on work needed to fix each affected computer. “It’s really, really difficult to touch millions of machines. And people are on vacation right now, so, you know, the CEO will be coming back from his trip to the Bahamas in a couple of weeks and he won’t be able to use his computers.”

Stiennon said he did not think the outage revealed a bigger problem with the cybersecurity industry or CrowdStrike as a company.

“The markets are going to forgive them, the customers are going to forgive them, and this will blow over,” he said.

Forrester analyst Allie Mellen credited CrowdStrike for clearly telling customers what they need to do to fix the problem. But to restore trust, she said there will need to be a deeper look at what occurred and what changes can be made to prevent it from happening again.

“A lot of this is likely to come down to the testing and software development process and the work that they’ve put into testing these kinds of updates before deployment,” Mellen said. “But until we see the complete retrospective, we won’t know for sure what the failure was.”

___

Associated Press writer Alan Suderman in Richmond, Virginia, contributed to this report.

KSL 5 TV Live

National News

Photo shows wreckage of Alaska plane crash....

Karina Tsui, CNN

All 10 victims of the fatal Alaska plane crash have been recovered, officials say

All 10 victims of the fatal Alaska plane crash off the coast of western Alaska have been recovered, authorities said Saturday.

1 hour ago

An aerial overall exterior general view of Caesars Superdome, Sunday, Dec. 15, 2024, in New Orleans...

Associated Press

Super Bowl 2025: Time, channel, halftime show, how to watch Chiefs vs. Eagles livestream

Super Bowl weekend has arrived. The Kansas City Chiefs will go for a historic three-peat in the NFL's title game on Sunday in New Orleans, while the Philadelphia Eagles are the only remaining team that can stop them.

3 hours ago

FILE -  Chicago Bears coach Dick Jauron calls out to his team while observing offensive drills in m...

Dave Skretta, AP Sports Writer

Longtime NFL player and coach Dick Jauron dies at 74

Longtime NFL player and coach Dick Jauron, who led the Chicago Bears to the playoffs and was voted AP coach of the year in 2001, died Saturday. He was 74.

5 hours ago

U.S. President Donald Trump, left, and Canadian Prime Minister Justin Trudeau talk prior to a NATO ...

Jim Morris, Associated Press

Justin Trudeau reportedly says Trump’s talk of making Canada a US state is ‘a real thing’

Prime Minister Justin Trudeau says President Donald Trump’s talk of making Canada the 51st state is “a real thing” and is linked to the country’s rich natural resources.

22 hours ago

Republican presidential nominee former President Donald Trump, left, claps as Tesla and SpaceX CEO ...

Anthony Izaguirre associated press

19 states sue to stop DOGE from accessing Americans’ personal data

Nineteen Democratic attorneys general have sued President Donald Trump to stop Elon Musk’s DOGE from accessing Treasury Department records.

22 hours ago

This photo provided by the U.S. Coast Guard on Friday, Feb. 7, 2025, shows a small commuter plane t...

Becky Bohrer and Hallie Golden, Associated Press

Missing commuter plane found crashed on Alaska sea ice and all 10 aboard died, authorities say

A small commuter plane that crashed in western Alaska on its way to the hub community of Nome was located Friday on sea ice, and all 10 people on board died, authorities said.

1 day ago

Sponsored Articles

holiday gift basket with blue tissue paper and gingerbread cookies...

Kneaders Bakery & Cafe

Holiday hacks for a stress-free season

Get more out of your time with family and loved ones over the holidays by following these tips for a stress-free season.

2 computer techs in a computer shop holding up a computer server with the "hang loose" sign...

PC Laptops

A comprehensive guide to choosing the right computer

With these tips, choosing the right computer that fits your needs and your budget will be easier than ever.

crowds of people in a German style Christmas market...

This Is The Place Heritage Park

Celebrate Christkindlmarket at This Is The Place Heritage Park!

The Christkindlmarket is an annual holiday celebration influenced by German traditions and generous giving.

Image of pretty woman walking in snowy mountains. Portrait of female wearing warm winter earmuff, r...

Lighting Design

Brighten your mood this winter with these lighting tricks

Read our lighting tips on how to brighten your mood in the winter if you are experiencing seasonal affective disorder.

A kitchen with a washer and dryer and a refrigerator...

Appliance Man

Appliance Man: a trusted name in Utah’s home appliance industry

Despite many recent closures of local appliance stores, Appliance Man remains Utah's trusted home appliance business and is here to stay.

abstract vector digital social network technology background...

Les Olson

Protecting yourself against social engineering attacks

Learn more about the common types of social engineering to protect your online or offline assets from an attack.

How a faulty CrowdStrike update crashed computers around the world