OT: Global IT outage causing chaos with many systems.
- Thread starter WhiteBus
- Start date
It's been fixed supposedly.
Bad update. Not a hack
Awesome
All set to head to Cali tomorrow for a work conference and Dodgers - Sox
Hopefully it gets fixed today
All set to head to Cali tomorrow for a work conference and Dodgers - Sox
Hopefully it gets fixed today
Weird timing for this event as I'm in a Security Boot Camp all week and we've just spent a portion of our training this morning going over this issue.
Good blog on the outage from the Times, including a nice summary of the event, below, which, as you noted, was from a flawed update of security software from CrowdStrike, not from any hack.
A massive global technology outage on Friday took down airlines, medical services, TV broadcasts, banks and scores of other businesses and services around the world, a stunning example of the fragile dependence the global economy has on certain software and the cascading effect it can have when things go wrong.
The outage was attributed to CrowdStrike, a cybersecurity firm whose software is used by scores of industries around the world to protect against hackers and outside breaches. A software update issued by CrowdStrike appeared to be at the root of the problem, resulting in crashes of machines running the Microsoft Windows operating system.
“This is not a security incident or cyberattack,” said George Kurtz, the chief executive of CrowdStrike. “The issue has been identified, isolated and a fix has been deployed.”
https://www.nytimes.com/live/2024/0...te=1&user_id=3f7a7d00850ad922736b3173646a296d
The Knight Report message board has not missed a beat - impressive.
I've been helping out at the office bringing back systems. CrowdStrike pushed out a cyber security update which took systems down and caused a blue screen of death. Can't reboot them. Need to reboot in recovery mode under an administrative account, then drill down and delete a specific file. After that, reboot and the machine is fine.
Wifey works for the state and told me an hour ago all systems are still down. No one can do anything lol. Not much different then usual I told her. She didn't like that
My company had our annual disaster recovery test planned for tonight/tomorrow.
It's now cancelled.
I'm just glad I don't need to log in at 7:30am tomorrow.
No surprise there. You need savvy IT people to go around and do this manually for all machines and servers, and I suspect the state doesn't have very many of those.
I almost had a heart attack when I walked into my office at 4 only to be greeted by the "blue screen of death". Called IT guy in Manila to find out I wasn't hacked and it was a Crowdstrike sensor update issue. A few re-boots and I was up and running, but damn this is going to be costly for CS.
Walking through EWR Saturday night and seeing the blue screen of death everywhere was interesting to say the least