Current:Home > StocksCrowdStrike shares details on cause of global tech outage -Prime Capital Blueprint
CrowdStrike shares details on cause of global tech outage
View
Date:2025-04-19 05:05:27
Last week’s global tech outage has been traced back to a bug in U.S. cybersecurity firm CrowdStrike’s quality control system.
The outage’s impacts have been far-reaching, affecting roughly 8.5 million Windows devices and disrupting banks, emergency call centers and airlines. Fortune 500 companies – not including Microsoft – face an estimated $5.4 billion in losses from the outage, according to insurer Parametrix. Meanwhile, hackers have used the outage as an opportunity to target CrowdStrike customers.
“The fact that a proper analysis wasn't done ended up having this huge cascading problem that companies are still dealing with today,” said Scott White, an associate professor and director of the cybersecurity program and cyber academy at George Washington University in Washington, D.C.
What was the cause of the IT outage?
Early in the day Friday, CrowdStrike pushed out what was supposed to be a routine software update to help monitor for possible emerging threats. But the update was “problematic," triggering a memory problem that set off Window's "Blue Screen of Death," according to the firm's preliminary post incident review. Mac and Linux hosts were not affected.
The software "attempted to do something Windows couldn’t process, and the system crashed as a result,” according to Dominic Sellitto, clinical assistant professor of management science and systems at the University at Buffalo School of Management in New York.
CrowdStrike said it has a "content validator" review software updates before launch, but the program missed the update's problematic content due to a bug.
“On Friday we failed you, and for that I'm deeply sorry,” wrote CrowdStrike Chief Security Officer Shawn Henry in a Monday LinkedIn post, adding that "thousands of our team members have been working 24/7 to get our customer systems fully restored."
The firm told USA TODAY it sent Uber Eats gift cards to teammates and partners who have been helping customers. TechCrunch reported that some recipients have had trouble accessing the gift, and CrowdStrike confirmed that Uber flagged the gift cards as fraud "because of high usage rates."
What happens next for CrowdStrike?
CrowdStrike said it plans to improve its testing, give customers more control over when updates are installed and stagger future software updates to its “Rapid Response” content.
Gregory Falco, assistant professor of engineering at Cornell University in New York, described the steps as "good software deployment and engineering practices." Some cybersecurity experts are questioning why certain safeguards weren’t in place before the tech outage.
“It’s easy to be an armchair expert, but there are best practices at play here that probably should have been in place sooner,” Sellitto said, adding that he gives CrowdStrike credit for their quick response to the outage.
Nikolas Behar, an adjunct professor of cybersecurity at the University of San Diego, said it was a surprise to see the outage tied to CrowdStrike – “one of the best, if not the best” cybersecurity firms in the country.
“They talked about how they're putting more checks into place in order to prevent this from happening again. But they were already supposed to have checks in the first place,” Behar said.
The U.S. House of Representatives Homeland Security Committee has sent a letter asking CrowdStrike CEO George Kurtz to testify on the outage.
“We cannot ignore the magnitude of this incident, which some have claimed is the largest IT outage in history,” the letter reads, adding that Americans will “undoubtedly feel the lasting, real-world consequences of this incident” and “deserve to know in detail how this incident happened and the mitigation steps CrowdStrike is taking.”
'Painful' wake-up call:What's next for CrowdStrike, Microsoft after update causes outage?
CrowdStrike said it plans to release a full analysis on the cause of Friday’s disruption once its investigation is complete. Experts who spoke to USA TODAY said they hope future reports shed more light on the decision-making process that allowed the bug to impact millions of devices.
“You hope that the producers are doing their due diligence. And I have to wait to see what their explanation is,” White of George Washington University said. “I don't care that you found the glitch. My problem is, why did the glitch hit the marketplace at all? And that's what seems to be missing here.”
Reuters contributed to this report.
veryGood! (7)
Related
- Israel lets Palestinians go back to northern Gaza for first time in over a year as cease
- Brittany Cartwright Defends Hooking Up With Jax Taylor's Friend Amid Their Divorce
- Army veteran reunites with his K9 companion, who served with him in Afghanistan
- It's cozy gaming season! Video game updates you may have missed, including Stardew Valley
- This was the average Social Security benefit in 2004, and here's what it is now
- Why have wildfires been erupting across the East Coast this fall?
- Judge extends the time to indict the driver accused of killing Johnny Gaudreau and his brother
- DWTS' Sasha Farber Claps Back at Diss From Jenn Tran's Ex Devin Strader
- 'As foretold in the prophecy': Elon Musk and internet react as Tesla stock hits $420 all
- Wheel of Fortune Contestant Goes Viral Over His Hilariously Wrong Answer
Ranking
- Angelina Jolie nearly fainted making Maria Callas movie: 'My body wasn’t strong enough'
- Tua Tagovailoa playing with confidence as Miami Dolphins hope MNF win can spark run
- Benny Blanco Reveals Selena Gomez's Rented Out Botanical Garden for Lavish Date Night
- Dwayne 'The Rock' Johnson weighs in on report that he would 'pee in a bottle' on set
- Gen. Mark Milley's security detail and security clearance revoked, Pentagon says
- Brian Austin Green Shares Message to Sharna Burgess Amid Ex Megan Fox's Baby News
- Why Cynthia Erivo Needed Prosthetic Ears for Wicked
- Taylor Swift Becomes Auntie Tay In Sweet Photo With Fellow Chiefs WAG Chariah Gordon's Daughter
Recommendation
Senate begins final push to expand Social Security benefits for millions of people
Mike Williams Instagram post: Steelers' WR shades Aaron Rodgers 'red line' comments
Bowl projections: SEC teams joins College Football Playoff field
Sean Diddy Combs' Lawyers File New Motion for Bail, Claiming Evidence Depicts a Consensual Relationship
The Louvre will be renovated and the 'Mona Lisa' will have her own room
Karol G addresses backlash to '+57' lyric: 'I still have a lot to learn'
Sister Wives’ Christine Brown Shares Glimpse Into Honeymoon One Year After Marrying David Woolley
Beyoncé nominated for album of the year at Grammys — again. Will she finally win?