Crowdstrike Outage | What Happened? | Neuways – Technologist

Experts Identify Likely Cause of CrowdStrike

Cyber intelligence agencies are warning about malicious websites claiming to fix devices affected by the recent global IT outage. These sites are distributing “unofficial code” that could cause further harm.

The outage, which impacted computer systems running Microsoft Windows, is believed to have been caused by a faulty software update from cybersecurity firm CrowdStrike. Experts suggest the update likely skipped necessary checks before deployment.

Impact and Cause

An estimated 8.5 million Microsoft Windows PCs worldwide were affected, disrupting airports, broadcasters, hospitals, and businesses. The issue arose shortly after CrowdStrike rolled out the latest version of its Falcon sensor software, intended to enhance security against hacking. Instead, the update caused devices to display a “blue screen of death” due to faulty code.

Steve Cobb, Chief Security Officer at Security Scorecard, speculated that the problematic file might have bypassed the usual vetting or sandboxing processes. Cyber Security researcher Patrick Wardle attributed the issue to a file containing configuration information or malware detection signatures, noting the high frequency of updates as a potential reason for inadequate testing.

Warning and Ongoing Disruptions

CrowdStrike’s efforts to enhance security backfired, leading to the exploitation of the incident by malicious websites. Australia’s cyber intelligence agency cautioned consumers to only seek technical information and updates from official CrowdStrike sources. Cybersecurity Minister Clare O’Neil also advised citizens to watch out for scams and phishing attempts.

Despite CrowdStrike deploying a fix, the outage’s aftermath continued to cause disruptions over the weekend. NHS England warned of ongoing disruptions to GP services into the following week, and pharmacies were dealing with significant backlogs. Additionally, travellers reported lost baggage and delays of up to nine hours at airports.

CrowdStrike’s Apology

CrowdStrike CEO issued an apology, acknowledging that recovery could take some time. The company is working to mitigate the impact and restore normal operations as swiftly as possible.

Contact Neuways should your business have any concerns about the Crowdstrike Outage

If you are a business owner or CEO who is concerned about the IT outage or what the ramifications are, then please talk to Neuways. As an MSP, we are experts at managing Business Disasters and formulating Recovery plans; whilst some companies may have just seen a day of work wasted, there may be further, dire consequences for other industries.

IT downtime is something we can help manage, but we can also have certain steps to help you through a crisis. In the digital age, a reliable MSP is integral, and that’s exactly what Neuways have a reputation for.