CrowdStrike blames bug for letting bad data slip through, leading to global tech outage

Advertisement

Advertise with us

NEW YORK (AP) — CrowdStrike is blaming a bug in an update that allowed its cybersecurity systems to push bad data out to millions of customer computers, setting off last week's global tech outage that grounded flights, took TV broadcasts off air and disrupted banks, hospitals and retailers.

Read this article for free:

or

Already have an account? Log in here »

To continue reading, please subscribe:

Monthly Digital Subscription

$1 per week for 24 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*Billed as $4.00 plus GST every four weeks. After 24 weeks, price increases to the regular rate of $19.00 plus GST every four weeks. Offer available to new and qualified returning subscribers only. Cancel any time.

Monthly Digital Subscription

$4.75/week*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*Billed as $19 plus GST every four weeks. Cancel any time.

To continue reading, please subscribe:

Add Free Press access to your Brandon Sun subscription for only an additional

$1 for the first 4 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles
Start now

No thanks

*Your next subscription payment will increase by $1.00 and you will be charged $16.99 plus GST for four weeks. After four weeks, your payment will increase to $23.99 plus GST every four weeks.

Hey there, time traveller!
This article was published 24/07/2024 (452 days ago), so information in it may no longer be current.

NEW YORK (AP) — CrowdStrike is blaming a bug in an update that allowed its cybersecurity systems to push bad data out to millions of customer computers, setting off last week’s global tech outage that grounded flights, took TV broadcasts off air and disrupted banks, hospitals and retailers.

CrowdStrike also outlined measures it will take to prevent the problem from recurring, including staggering the rollout of updates, giving customers more control over when and where they occur, and providing more details about the updates that it plans.

The company on Wednesday posted details online from its “preliminary post incident review ” of the outage, which caused chaos for the many businesses that pay for the cybersecurity firm’s software services.

A technician works on an information display near United Airlines gates at Chicago O'Hare International Airport in Chicago, Friday, July 19, 2024, after a faulty CrowdStrike update caused a major internet outage for computers running Microsoft Windows. (AP Photo/Carolyn Kaster)
A technician works on an information display near United Airlines gates at Chicago O'Hare International Airport in Chicago, Friday, July 19, 2024, after a faulty CrowdStrike update caused a major internet outage for computers running Microsoft Windows. (AP Photo/Carolyn Kaster)

The problem involved an “undetected error” in the content-configuration update for its Falcon platform affecting Windows machines, the Texas-based company said.

A bug in the content-validation system allowed “problematic content data” to be deployed to CrowdStrike’s customers. That triggered an “unexpected exception” that caused a Windows operating system crash, the company said.

As part of the new prevention measures, CrowdStrike said it’s also beefing up internal testing as well as putting in place “a new check” to stop “this type of problematic content” from being deployed again.

CrowdStrike has said a “significant number” of the approximately 8.5 million computers that crashed on Friday are back in operation as customers and regulators await a more detailed explanation of what went wrong.

Once its investigation is complete, CrowdStrike said it will publicly release its full analysis of the meltdown.

The outage caused days of widespread technological havoc, highlighted how much of the world depends on a few key providers of computing services and drawn the attention of regulators who want more details on what went wrong.

Also on Wednesday, CrowdStrike gained attention online for sending out $10 Uber Eats gift cards in an apparent effort to apologize for the outage’s disruptions.

A CrowdStrike spokesperson said the company sent gift cards “to our teammates and partners who have been helping customers through this situation” — but not customers or clients. The spokesperson added that Uber later flagged the offering as fraud “because of high usage rates,” without immediately providing more details on how many cards were distributed and when.

Report Error Submit a Tip