CrowdStrike and The Global IT Outage

CrowdStrike and The Global IT Outage: What Happened, Who Was Affected, and How to Resolve It

Introduction

On 19th July 2024, a mass IT outage caused widespread disruption across multiple sectors globally. This incident, which originated from a defective software update by CrowdStrike, a prominent cybersecurity firm, impacted businesses, airlines, banks, and hospitals. This blog post will explore what transpired, the extent of the impact, and the measures needed to resolve the issue and prevent future occurrences.

What Happened?

The IT outage was triggered by a defective update for Microsoft Windows PCs provided by CrowdStrike. Users reported experiencing the “blue screen of death” after installing the update. CrowdStrike’s CEO, George Kurtz, clarified that the issue stemmed from a “defect” in a single content update for Windows hosts, not a cyber attack. The company deployed a fix, but experts warned it could take weeks for systems to return to normal.

How Did It Happen?

The problem arose from an update to CrowdStrike’s Falcon Sensor software, which is designed to block attacks and detect threats. A flaw in this update caused Windows PCs to crash, leading to widespread disruptions. Despite the fix being deployed, the complexity of applying it globally means many systems may face prolonged issues.

Who Was Affected?

The impact of the outage was extensive and far-reaching:

  1. Businesses and Financial Institutions: Banks like the National Australia Bank experienced downtime, and payment systems in Australian supermarkets such as Woolworths went down, causing significant financial and operational disruptions.
  2. Airlines and Airports: Flights were delayed or cancelled across the globe, including at major airports in the USA, UK, and Australia. Airlines like Virgin Australia and Jetstar had to adjust their schedules, leading to chaos for thousands of passengers.
  3. Healthcare Systems: NHS England reported disruptions in GP practices, affecting appointment bookings, while Northern Ireland’s Department of Health noted that two-thirds of its GP practices were impacted.
  4. Media and Communication: Sky News experienced a temporary broadcast interruption, highlighting the widespread nature of the outage.

How Can It Be Resolved?

How to Fix the CrowdStrike Blue Screen Problem

CrowdStrike

1. Boot Into Safe Mode Or Windows Recovery Environment

Boot your Windows computer in Safe Mode or the Windows Recovery Environment.

In this case, since starting up your Windows computer results in a blue screen of death, you will have to enter the recovery environment during the boot.

This can be done by pressing the F12, F10, or “Del” keys during the boot.

2. Locate And Rename The CrowdStrike File

In the Windows Recovery Environment, go to Troubleshoot -> Advanced Options -> Command Prompt.

  • Now, type this command and press enter: notepad.exe
  • This will open the Notepad.
  • Now, click on File -> Open.

This will open the Windows Explorer.

  • Now, navigate to the following folder: C:\Windows\System32\drivers\CrowdStrike
  • Locate the following file: C-00000291*.sys
  • Delete it.

3. Reboot

Once you’re done deleting the CrowdStrike file, navigate out of the Windows Recovery Environment and reboot your Windows computer.

The Importance of Security and How Better-IT Can Help

This incident serves as a stark reminder of the paramount importance of robust security measures in today’s digital landscape. At Better-IT, we understand that the security of your systems and data is critical to the success and continuity of your business. Our commitment to providing premium IT services, including top-tier cybersecurity solutions, ensures that your business is protected against vulnerabilities and cyber threats.

By partnering with Better-IT, you can rest assured that we are professionally managing and securing your IT infrastructure, allowing you to focus on your core business operations. With our highly trained technicians, continuous monitoring, and proactive approach to cybersecurity, Better-IT stands as your invaluable partner in maintaining a secure, scalable, and resilient IT environment. Together, we can navigate the complexities of the digital world and safeguard your business from future threats.

Book a discovery call today, and lets talk about your companies security and how together we can strengthen your businesses future.