Crowdstrike and Microsoft: What we know about global IT outage

In case anyone hasn’t heard of this yet.

6 Likes

The article I was sent is paywalled, but 12ft is an Amazing site to get around that.

UPS and FedEx warn of potential delivery delay after global tech outage

Package delivery firm UPS (NYSE:UPS) notified its customers of a potential delay in delivery of their packages after a massive IT outage affected systems around the world, impacting operations across industries in banking, healthcare, media, and travel.

“While the UPS network is operating and delivering in all areas, there is a potential for delivery delays due to a global technology outage. Contingency plans are in place to help ensure that shipments arrive at their final destinations as quickly as possible,” UPS said in a service alert notification on their website.

FedEx (NYSE:FDX) was not spared either from the outage and warned customers in a similar tone as its main rival. The company said it “experienced substantial disruptions” throughout its networks.

Chaos across businesses ensued after CrowdStrike (CRWD) released an update for computers running Microsoft’s (MSFT) Windows operating system. The cybersecurity firm said its “Falcon Sensor” made Windows OS crash and display a blue screen known as the “Blue Screen of Death.”

Wedbush analyst Dan Ives calls the incident a “major black eye” for CrowdStrike. Although not a cyber attack, the magnitude of the outage caused CEO George Kurtz to apologize for the inconvenience, which caused delays at airports, financial transactions failing, and disruptions in TV broadcasting, among other things. The issue is mostly resolved, but the residual impact of the outage remains.

4 Likes

The bridge and tunnel from Detroit to Canada are affected. And the BBC article mentions a large port in Poland so probably others are also impacted.

Spellcheck?

spellcheck did not recognize Poland?? Odd. (IOS Safari)

4 Likes

mostly resolved? black eye?

Heads need to roll

I know our Volusion website is still down https://status.volusion.com/

3 Likes

ArsTechnica spotted a post that notes that the CEO of CrowdStrike was CTO of McAfee in April 2010 when they sent out an update that deleted a Windows XP file that caused outages and system-by-system file repair.

We’ve received an update from our FedEx account manager that most services and locations are operating as normal. Some delays may be experienced. They’re currently working on getting impacted locations back to normal. They helpfully provided that update 16 whole minutes before the mass email sent by FedEx to their users.

3 Likes

This is a 100% CrowdStrike Issue. Nothing to do with Microsoft just to clear the air a little

8 Likes

CrowdStrike fixes start at “reboot up to 15 times” and get more complex from there

IT workers around the globe deserve some sympathy today.

4 Likes

Not the ones from AMAZON!!! Their one-size fits-all-thinking is so skewed. Make mistakes each day-and never bother to correct them…

1 Like

This is slightly debatable. The fact the windows OS is brickable by a 3rd party update is problematic. But windows having security flaws/vulnerabilities is nothing new.

5 Likes

We find this very interesting after 1) Microsoft Windows update in June shut down all Roland engravers and any engraving machine (driver issues), 2) a kernel update took out all of the sites on our web host and now 3) this Crowdstrike update issue.

Cutting corners and not double checking?

.

When a young programmer learns the hard way?

3 Likes

Thank you!

We’re gonna need it; all of our hospital clients using Falcon went down…

10 Likes

There’s resolution, and then there’s recovery. Recovery is the problem now, and it’s HUGE.

These details from a tech friend:

(VM=virtual machine)

2 Likes

3rd party security update. Security software is a different beast.

Same thing can happen to Linux or MacOS

4 Likes

Although this is a blackeye for Crowdstrike, there is much more blame to go around.

It was well known since the early 1960’s that secure networking was not possible without network technology that was secure, and operating systems that were secure.

The Department of Defense never used Arpanet for any functions which required security or were mission critical. It was toy for use mostly by academics.

It has other technology for secure applications.

The Internet was built on Arpanet because it existed and required no royalty payments.

The user community, put applications on the Internet which required security when there was none. Why, because secure connectivity was expensive because it could not be shared and be secure.

All of the security breaches and their effects cause unbounded damage.

Crowdstrike’s products add more software to fail, and does not eliminate all chances of a security breach.

We are all so deeply dependent on the Internet and going to continue to experience breaches and failures forever.

4 Likes
2 Likes
2 Likes

Well no wonder the A-Z situation is so messed up! :smile:

5 Likes

Let’s just slide this update in right here and…
Jenga Jenga Blocks GIF

Trying to recover: Oh crap… what did that stack look like.

7 Likes

They are on hour 12 of recovery and counting…:woman_facepalming:

4 Likes