CrowdStrike, Microsoft, and the glitch that rocked the world

Last week, a global IT outage knocked out Windows systems at airports, banks, businesses and hospitals. Today – how one faulty update by cybersecurity company CrowdStrike caused global chaos, and what it says about the state of cybersecurity.

[JoyceMuller-xvkh]

This global internet outage is insane! All airlines grounded and i was stock the airport and even banks, media, and offices from the U.S. to Australia. How can CrowdStrike have such a monopoly that could help restore such a massive amount of tech?

[mal]

OK so almost 9 1/2 minutes into this, and the answer is that the update "wasn't tested thoroughly." This is a global cybersecurity company who basically pushed an update that wasn't ready yet. Kind of like trying to drive a car from the dealer and the wheels come off because some bolts weren't tightened properly.

[mal]

If you don't want to listen to 23 minutes of this I'll give a summary: 1. update wasn't tested properly. 2. Crowdstrike will test better in the future and 3. Crowdstrike will allow customers to control the timing of updates.

[theresacarmen]

Does this scare the hell out of anyone other than me?

[IcarusFlyby]

You have been stoned! - My first virus!

[rayw]

To call this a "glitch" is to trivialize the whole thing. It makes it sound like the computer did something wrong, the computers affected only did what they were told to do by humans. This is the result of incompetent software design, failed or non-existent quality assurance and quality control, and failed or non-existent testing procedures. Who knows how many people suffered aggravated injuries or deaths or their house burned down because of 911 systems being down. Who knows how many people suffered aggravated conditions or deaths because of delayed medical procedures because of hospital systems being down. Crowdstrike is 100% responsible for all of this. They are also responsible for any and all financial damages that were suffered by any of their victims. I call them "victims" because they truly are, through no fault of their own, they have suffered loss. Crowdstrike needs to be held both civilly and criminally responsible for all damages. If anyone died, then charges of negligent homicide need to be filed, people need to be tried, convicted and jailed.

[direktive]

did they recently lay off a bunch of competent people? why does a company worth 65-70 BILLION USD not have much of a support team? have they not watched Jurassic Park?

[JustMonday-turx]

Has anybody ever made an analysis which countries were concerned?
I have only heard of European countries, Singapore and Hong-Kong and the US. Any other country?

[direktive]

multibillion dollar cybersecurity company. what good is any of it if the threat is coming from inside the house.

[arthurhouston]

Tell Jeff to sell WP no one believes you.