CrowdStrike: How an IT outage caused worldwide havoc

Sdílet
Vložit
  • čas přidán 4. 09. 2024
  • Flights were cancelled, trains delayed, shop tills stopped working and TV stations went off the air. All because of a faulty upgrade to a cyber security software system which triggered a global meltdown.
    The boss of Crowdstrike, the firm behind the system, took to social media to apologise, and insisted "a fix is being put in place".
    But it was also a wake up call - revealing just how quickly the ripple effect from a single glitch could affect industries across the world.
    [Subscribe: bit.ly/C4_News...]
    -------
    Get more news at our site - www.channel4.c...
    Follow us:
    TikTok - / c4news
    Instagram - / channel4news
    Twitter - / channel4news
    Facebook - / channel4news

Komentáře • 525

  • @OliverLiam-px3vx
    @OliverLiam-px3vx Před měsícem +307

    This global internet outage is insane! All airlines grounded and i was stock the airport and even banks, media, and offices from the U.S. to Australia. How can CrowdStrike have such a monopoly that could help restore such a massive amount of tech?

    • @MelissaHobbs-qm8wi
      @MelissaHobbs-qm8wi Před měsícem +4

      It's pretty concerning. If they can fix this, what other control do they have over our infrastructure? or are we truly in the matrix?

    • @ChloeCarter-kd7gz
      @ChloeCarter-kd7gz Před měsícem +5

      Right? It makes you think about the stability of our systems. But hey, I barely spend time online. When I checked my portfolio with Desiree Ruth Hoffman, we were still in the greens. That’s been the case for 16 months straight!

    • @ScottLarrry
      @ScottLarrry Před měsícem +4

      Wow, really? I've seen the name Desiree Ruth Hoffman before but can't figure out where.

    • @MelissaHobbs-qm8wi
      @MelissaHobbs-qm8wi Před měsícem +4

      Probably from her forecast on Nvidia before the pump. But how are you in the greens with all the fluctuations due to the election and everything else? Can you share her strategy?

    • @ChloeCarter-kd7gz
      @ChloeCarter-kd7gz Před měsícem +4

      Honestly, just schedule a call with her. She has vast knowledge in finance and really knows how to navigate these times. I handed over my portfolio to her so I can focus on my family. These days, things just get scarier and scarier.

  • @HiltonT69
    @HiltonT69 Před měsícem +222

    Who ever thought to name their software "Crowdstrike" had amazing foresight. :)

    • @morisn
      @morisn Před měsícem +8

      Prophecy

    • @sun2020able
      @sun2020able Před měsícem +3

      🤣🤣🤣

    • @X-VoodooKing-X
      @X-VoodooKing-X Před měsícem +3

      Yeah, the name hit home.

    • @OPIXdotWORLD
      @OPIXdotWORLD Před měsícem

      @@morisn or planned event... u all need to look up DARK WINTER to seer the plan... Raina MacIntyre

    • @llhiejen
      @llhiejen Před měsícem +1

      Hehehe Yeah its free Advertisement for the company..

  • @clayto1977
    @clayto1977 Před měsícem +80

    I worked with an IT Manager who was super cautious about third party software and would test every patch in isolation before releasing it to the corporate computers.His theory was the people running these crowdstrike type products are only as good as us and we make mistakes so they will. The amount of times he saved from these situations was unbelievable. He took no thanks for this service.

    • @bobtheskutterbot
      @bobtheskutterbot Před měsícem +3

      I assumed that was how everyone did it... isn't this obvious?

    • @ucarouen
      @ucarouen Před měsícem +15

      ​@@bobtheskutterbotYou would be horrified to find out it isn't the norm. Microsoft doesn't do much testing of their monthly patches before deploying anymore. The users are the unwilling beta testers.

    • @gravidar
      @gravidar Před měsícem +5

      Back when I managed servers this is exactly how I did it, deploy everything to a test environment first. Unfortunately, nowadays it's deemed more "secure" to apply security patches as soon as possible so Windows Update will do it all for you, "don't worry, it'll be fine" - this is how IT infrastructure is run now, pay a subscription to have someone else take the responsibility, we only have ourselves to blame.

    • @rx228
      @rx228 Před měsícem +3

      ​@@bobtheskutterbotthe norm is to test in production. The users are the testers in most cases. Testing in an isolated environment is considered a waste of time and resources by management and the bean counters. Caution is never rewarded in corporate

    • @Kira-gc2er
      @Kira-gc2er Před měsícem

      Seems the update was over the air and updated without even the user's consent 😢

  • @Lottodds
    @Lottodds Před měsícem +228

    One company should NOT have that much power

    • @nickfromm5315
      @nickfromm5315 Před měsícem +23

      National security threat.

    • @mukuro8033
      @mukuro8033 Před měsícem +3

      lol

    • @MarkyGoldstein
      @MarkyGoldstein Před měsícem +18

      It's two companies here: Microsoft and Crowdstrike. The cloud infrastructure on a global scale already made the shift towards Unix based servers (mostly Linux), exactly for stability reasons. This includes Azure. It's purely laughable that such critical systems still run on the dinosaur.

    • @kafir-magriban8009
      @kafir-magriban8009 Před měsícem +2

      Why don't they build their own servers and maintain it.

    • @TheMinimumPC
      @TheMinimumPC Před měsícem +8

      It’s okay, they’re American

  • @GabrielaYapia
    @GabrielaYapia Před měsícem +67

    The fact most people didn’t even know what Crowdstrike was until today 👀 insane amount of power this company has

    • @TheChiefEng
      @TheChiefEng Před měsícem

      Yeah well, now Crowdstrike can look forward to be sued into oblivion.
      Microsoft should be sued into oblivion as well because the very need for Crowdstrike at this absurd level in purely because Windows is an abysmally unsecure operation system.
      These problems never happens to this extent with other operating systems like IOS and Linus.
      This very problem has, as usual, been created by American greed and American incompetence to make quality systems.

    • @cassieoz1702
      @cassieoz1702 Před měsícem

      It's customers are predominantly large commercial concerns, not individuals. So it's anonymity is due to who the client base are, rather than anything underhanded

  • @terric6013
    @terric6013 Před měsícem +92

    Sounds like a World Wide Test

    • @abbierelin6109
      @abbierelin6109 Před měsícem

      This!

    • @Hartley_Hare
      @Hartley_Hare Před měsícem

      Nice to see the nutters latching onto this.

    • @jcstudio5685
      @jcstudio5685 Před měsícem +1

      That's what I thought too.

    • @Hartley_Hare
      @Hartley_Hare Před měsícem

      @@jcstudio5685A whole brigade of The Mad. Shouldn't you be setting fire to phone masts and posting on flat earth forums?

    • @durranaik
      @durranaik Před měsícem

      @@Hartley_Hare care to recommend a flat earth forum? 😁

  • @Nele_BiH
    @Nele_BiH Před měsícem +84

    How the f you rollout a update without proper testing?

    • @VirtualR
      @VirtualR Před měsícem +18

      git push the wrong repository lol

    • @PB72UK
      @PB72UK Před měsícem +4

      @@VirtualRthats not even possible in normal use

    • @ps9469
      @ps9469 Před měsícem +6

      Did they let AI do the push?

    • @PB72UK
      @PB72UK Před měsícem +24

      Exactly … i work for a company who write and use software… we have to test a release in several environments before we get to production, your question is very valid and beggars belief how a release this dangerous was ever allowed to be pushed live across the globe without proper testing !

    • @VirtualR
      @VirtualR Před měsícem +2

      @@PB72UK It's obviously not normal use if it takes down half the worlds servers lol

  • @Ghost_PM11
    @Ghost_PM11 Před měsícem +30

    Have they tried turning it off and on again?

    • @samjohnson2801
      @samjohnson2801 Před měsícem

      Bruh

    • @user-S853
      @user-S853 Před měsícem

      That’s the issue. They’re turning themselves off an on again! They don’t stay on! We can’t stop them!

    • @susanzoefelix6631
      @susanzoefelix6631 Před měsícem

      😂😂😂

  • @cloudlessx
    @cloudlessx Před měsícem +92

    Y2K was not a phantom. It didn’t cause widespread issues because many organisations worked together for a very long time to mitigate the risks.

    • @jaybatterson2764
      @jaybatterson2764 Před měsícem +8

      Totally agree. Bravo

    • @VirtualR
      @VirtualR Před měsícem +21

      Correct, Y2K was real and the problem was fixed with massive amounts of work beforehand. A lot of people think because nothing happened there was no problem. We are already patching and ensuring software is ready for the next one, the end of INT unixtime on January 19, 2038.

    • @CrabbyOldLady
      @CrabbyOldLady Před měsícem +7

      Exactly. I was part of the team that worked on the issue for 18 months at a large state university. We identified where it would be an issue, identified the fix, tested the fix, and had it under control in plenty of time. If we hadn't, the entire student record system would have failed, as would the university bookstore point of sale system.

    • @plonk7
      @plonk7 Před měsícem +3

      100%! It's ridiculous that the result of a massive amount of work successfully averted global, catastrophic computer crashes and, as a result of this success, people say it was never a problem in the first place. Perhaps Crowdstrike and Microsoft used the same flawed logic that because no previous updates had ever caused a problem they could save money by removing the QA dept whose work had, in fact, prevented this very problem in the past...

    • @choir74
      @choir74 Před měsícem +2

      I too agree, Y2K was not a phantom. The reporter clearly didn't understand either the problem or the huge amount of work undertaken to prevent it causing chaos.

  • @Chris_34
    @Chris_34 Před měsícem +131

    Say no to a *cashless society!*

    • @Bunny11344
      @Bunny11344 Před měsícem +8

      While I only use cards but I agree with u

    • @nanochase
      @nanochase Před měsícem +6

      Except that the registers aren't working either. Only small time companies don't use cloud backed registers. Everything corporate would have a live connected pos system.

    • @CarTastic-fv6eo
      @CarTastic-fv6eo Před měsícem +2

      @@nanochase This may evaluate many thing and change their approach to this.

    • @SystemAdministrator1
      @SystemAdministrator1 Před měsícem +7

      CASH 💸 IS KING !

    • @einsam_aber_frei
      @einsam_aber_frei Před měsícem +1

      A global outage of electricity, suddenly all your money in the bank is gone. Great reset!

  • @fToo
    @fToo Před měsícem +36

    the Y2K bug was absolutely NOT a "phantom" ... it's just that most of them were fixed before they caused chaos.
    watch the Gresham College 2017 talk by Prof Martyn Thomas to understand it.

    • @Rawd123
      @Rawd123 Před měsícem +4

      I caught this also. I hear this all the time and it's so annoying. lol.

  • @estebanperez4171
    @estebanperez4171 Před měsícem +9

    I sell cybersecurity and still don’t understand how IT/security professionals don’t get paid like Software Engineers

    • @JDSTUDY
      @JDSTUDY Před měsícem

      What is the difference between a Software Engineer and a Cybersecurity Engineer?

    • @estebanperez4171
      @estebanperez4171 Před měsícem

      @@JDSTUDY software engineers typically write code to build or maintain software. Security engineers or analysts have more security focused tasks that are all focused on protecting the company from ransomware and malware.

  • @Hciprian20
    @Hciprian20 Před měsícem +20

    Cash is king

    • @Bonjour-World
      @Bonjour-World Před měsícem

      Senator Menendez disagrees with you. He believes Gold is King.

    • @Hciprian20
      @Hciprian20 Před měsícem +1

      @@Bonjour-World maybe but I still like cash more

  • @jonboy2950
    @jonboy2950 Před měsícem +6

    It was caused by a company failing to test their software, a simple upgrade then turn the machine on and check would have done the trick. Not the first time ive seen a company fail to do this.

  • @caio5987
    @caio5987 Před měsícem +15

    No, Y2K wasn’t just a “phantom all along”
    It was indeed serious but nothing happened because a lot of very intelligent people worked really hard to resolve it before it became an issue

  • @TheMediterano
    @TheMediterano Před měsícem +34

    I still can't conceive the following points:
    1) How were such a widely used product's automatic and manual test processes not able to catch the bug?
    2) Don't they adopt canary or blue/green deployment strategies in order to reduce the blast radius in such large roll-outs?

    • @TheSpiciestGinger
      @TheSpiciestGinger Před měsícem +4

      I'm so poor with technology I admitted can't comprehend what you said but sounds like they need to give you a wee job

    • @lucasrem
      @lucasrem Před měsícem +2

      you need a beta Rollout first, you are right

    • @comensky
      @comensky Před měsícem +3

      @@TheSpiciestGinger manual and auto testing - testing by human + testing by computer
      canary /blue/green deployment - you dont roll out at once. You test at some places. Then roll to others. You phase it in by region for example

    • @50PullUps
      @50PullUps Před měsícem +1

      Also... and this is not to redirect blame from CrowdStrike... companies should also be testing these updates in a sandbox environment before rolling them out to subsequent systems.

    • @samjohnson2801
      @samjohnson2801 Před měsícem

      Prove you're not a robot​@@comensky

  • @user-gn1cl9ix7p
    @user-gn1cl9ix7p Před měsícem +5

    I’m not sure if it “reassuring” that this huge problem WASN’T caused by an attack.

  • @One21Jiggawatts
    @One21Jiggawatts Před měsícem +27

    So you really can break the internet.

    • @Harry-ll9yu
      @Harry-ll9yu Před měsícem +2

      No. Bill gates can break the internet. Creepy, huh ?

    • @jamesr8584
      @jamesr8584 Před měsícem +3

      The internet worked, it was computers that didn't work.

    • @annmaryjohn3258
      @annmaryjohn3258 Před měsícem

      ​@@jamesr8584Right! Most internet servers run on Linux, so yay! 😅

    • @One21Jiggawatts
      @One21Jiggawatts Před měsícem

      @@jamesr8584 It was an IT Crowd joke, dude.

    • @MargaritaMagdalena
      @MargaritaMagdalena Před měsícem

      Better start dwnldng all the content you value and save on HD.

  • @Elizabeth-lz3xu
    @Elizabeth-lz3xu Před měsícem +93

    This should be a sign we rely way too much on technology.

    • @monkmodelandon2024-kh6ot
      @monkmodelandon2024-kh6ot Před měsícem +7

      We rely too much on Microsoft Products

    • @aohjii
      @aohjii Před měsícem +13

      na technology isn't the problem , its monopoly

    • @squirrelsinjacket1804
      @squirrelsinjacket1804 Před měsícem +3

      So right, we should also still be wearing wooden shoes made by hand.

    • @NCHLTII
      @NCHLTII Před měsícem +2

      Defending micro$oft are we? Linux (and god forbid even mac) users are having the time of their life

    • @vejen5719
      @vejen5719 Před měsícem

      @@NCHLTIIyep my work uses Mac and while I noticed the web based accounting program we use went down (assuming they use crowdstrike) we had to stay at work

  • @marcoose777
    @marcoose777 Před měsícem +20

    Wot no testers? Seriously, the damage could have been limited when Australia started experiencing the problems, CrowdStrike could have taken the 'update' down then. Mind you, there's nothing more secure than a windows device that won't boot ;)

    • @VirtualR
      @VirtualR Před měsícem +4

      The bigger the company the harder it is to get the message through to the correct people in time, but it started at 2pm Australian time so I would say it wasn't a timed release, it likely went out to most customers at around the same time

    • @frankm7707
      @frankm7707 Před měsícem +1

      The budget for product testing is going into C level’s pocket

    • @marcoose777
      @marcoose777 Před měsícem

      @@frankm7707 Yep, as ever less polyester == happier customers

    • @squirrelsinjacket1804
      @squirrelsinjacket1804 Před měsícem +2

      Seems like an immediate a repeating bsod after the update would have been caught before it was released in the wild.

  • @trevorsurname8153
    @trevorsurname8153 Před měsícem +56

    When a business like McDonald's has burgers sizzling on the grill, but can't sell them because they require a computer system to do so, this is a big problem. Companies should not be so dependent on computers that they can't operate for even a few days without them.

    • @DarkHelixia
      @DarkHelixia Před měsícem +4

      If the grill packed up, would you say McD shouldn't be so dependent on grills?

    • @DaScorpioGoDdEsS
      @DaScorpioGoDdEsS Před měsícem +2

      I worked at dairy queen and when our computers went down the owner would make us write out receipts and rake only cash and do the math with a calculator NO MATTER HOW BUSY IT WAS. It can be done lol

    • @Bonjour-World
      @Bonjour-World Před měsícem +1

      Pen and paper still works if the employees are bright enough to add and subtract without a computer.

    • @Aquariangirl126
      @Aquariangirl126 Před měsícem +3

      @@DaScorpioGoDdEsS I remember back in the 80’s when I worked at Dunkin’ Donuts and our registers stopped working. It was business as a usual, no panic we used calculators and kept it moving during the morning rush crowd.

    • @EvilThunderB0lt
      @EvilThunderB0lt Před měsícem +2

      @@Bonjour-WorldIt's not a matter of employee's abilities. It is a matter of permission... You credit employees with powers that are usually beyond their control.

  • @qh9070
    @qh9070 Před měsícem +4

    Their patch management process is insane ...was it even put in a test environment first and released on a friday at that

  • @Bonjour-World
    @Bonjour-World Před měsícem +10

    Crowdstrike failed to crash a single Linux or Apple OS based computer system.

    • @enadegheeghaghe6369
      @enadegheeghaghe6369 Před měsícem

      That's because the buggy update was for falcon software that runs on Windows computers. crowdstrike also has software that runs on Linux and MacOs but those were not yet updated.

    • @betag24cn
      @betag24cn Před měsícem

      because those do not access windows boot files like crowdstrike does, and jeep in mind, not long ago this same situation happened iirc was with kaspersky and with mcafee
      windows allows the antivirus to do anything, there is no real security, windows does not protect itself at all, linux the first thing it will ask is root administrator permision, since you do not run as administrator, the app can do nothing, no bad update, no access to boot files, no problem

    • @enadegheeghaghe6369
      @enadegheeghaghe6369 Před měsícem

      @@betag24cn how about the owners of the computers take responsibility for what they install on their computers? Is any customer of Crowdstrike pretending they didn't know they installed the Crowdstrike Falcon software that they paid for? It's not like it's free and being forced on users.
      I can just imagine the furore if Microsoft were to block these types of antivirus software. People would be whining about Microsoft being a gatekeeper for security software. I can hear them now: "it's my computer and it's up to me to decide what to do with it ". Or " my computer would not have been hacked if Microsoft didn't block me from installing this Cybersecurity solution I wanted to install"

    • @betag24cn
      @betag24cn Před měsícem

      @@enadegheeghaghe6369 if i am told to install a security tool to avoid security risks, i am a customer, i cant be responsible for the low quality of the product i got, i paid for
      no, the responsability goes the other way, the repnsability here is on the company offering the product, i al told it is the leader and everybody uses it, who am i to doubt if the product is good or not?
      the problem here is put all your eggs in one basket, not in the customer who believed in the reputation of that company that will go bankrupt thanks to no more sales and the lawsuits for what they called a interruption in the service...
      fkers killed thousands of pcs and paid nothing to anyone
      microsoft has blame here, it is not the first time something like this happens, so it is easy to do
      it was bad because for some reason people in very important companies trust them with their machines and the company security
      i bet some companies will move what they can to linux asap

  • @user-vq3bl8xx3i
    @user-vq3bl8xx3i Před měsícem +62

    You can't rely on technology 100%

    • @cool_cat007smoove3
      @cool_cat007smoove3 Před měsícem +1

      Indeed

    • @OuterHeavenProduction
      @OuterHeavenProduction Před měsícem +1

      But the world does

    • @Crftbt
      @Crftbt Před měsícem +1

      Think about the amount of heartache since technology created the pencil.

    • @Joris-KarlHuysmans
      @Joris-KarlHuysmans Před měsícem +1

      That’s why avoiding single points of failure is a common practice in tech, specially when dealing with critical infrastructure. A concept big companies don’t seem to understand all that well.

    • @NCHLTII
      @NCHLTII Před měsícem +1

      You can't rely on Windows at any percent

  • @OfficialTechMinute
    @OfficialTechMinute Před měsícem +92

    And we in IT still don't get paid enough.

  • @aisle_of_view
    @aisle_of_view Před měsícem +42

    Smart companies don't set their computers to automatically apply updates as they are released, certainly not on a Friday when the IT folks are gone for the weekend. Let the rest of the world be the beta testers.

    • @zqzj
      @zqzj Před měsícem +1

      💯

    • @wandak1889
      @wandak1889 Před měsícem +4

      Exactly! I have a IT background and I don’t have automatic updates on personal devices. Too many companies get breaches with these updates! Sounds like a real FU to me.

    • @KIYOKO-10
      @KIYOKO-10 Před měsícem

      @@wandak1889 It happened to our domain controllers at my workplace.
      we ended up having to connect via iLO and reboot into safe mode, delete a specific .sys file within system32/drivers directory & reboot.
      It's was updating the antivirus agent installed on the servers. this wasn't chosen to be automatic or not. it happens regularly. You just don't expect a company to protect you against this exact thing be the cause. Just lazy testing for something so critical to millions.

    • @JPMNRB
      @JPMNRB Před měsícem +2

      There is a lack of understanding how Crowdstrike works they always do silent updates for years until this happened I am sure the option to to disable that will be available in the next update 😂

    • @siewheilou399
      @siewheilou399 Před měsícem

      Phones are doing the same.

  • @MarkyGoldstein
    @MarkyGoldstein Před měsícem +6

    The migration to Unix derived systems has to be accelerated

    • @Aethid
      @Aethid Před měsícem

      How would that help? *nix is no less vulnerable to this particular kind of bug in user-installed kernel modules/drivers.

  • @gesnow
    @gesnow Před měsícem +11

    This is a problem with Poor Change Management, these changes should be manage by the Company end points, not by CrowdStrike...

    • @jeannined7532
      @jeannined7532 Před měsícem +2

      This is a problem of human hubris.

    • @stephencook7517
      @stephencook7517 Před měsícem

      Hi, this is a Release problem. New software including patches should be tested on non production environments before deployment to production environments via Change Management. These quality checks very much limit the risks associated with new software impacting production.

  • @ommmggee5667
    @ommmggee5667 Před měsícem +11

    Test run?

    • @Supernova752
      @Supernova752 Před měsícem +3

      That’s what I think

    • @frankm7707
      @frankm7707 Před měsícem +1

      Yeah, they did a loop in the office parking lot

    • @Supernova752
      @Supernova752 Před měsícem

      @@frankm7707
      🤣🤣🤣
      I guess that qualifies, lol

    • @frankm7707
      @frankm7707 Před měsícem

      @@Supernova752 Gen Z is a blinds leading blinds mentality culture. Zero integrity and we are all doomed.

  • @sydryan9589
    @sydryan9589 Před měsícem +3

    Y2K bug wasn't a phantom. People spent countless hours fixing it to mitigate the bug!

  • @sintiowlim
    @sintiowlim Před měsícem +1

    The technology meltdown caused by CrowdStrike is very instructional.
    1. When it happened, there were no fake news, no clamour to hunt down what is the cause
    2. When Microsoft was identified as one of the companies affected, again, there was no demand on how such a major computer software company can be so vulnerable
    3. Finally, CrowdStrike was identified as the cause. again, the Western media exercised EXTREME patience with no demands for damages etc etc .
    4. China and Russia never add fuel to the fire even though they knew CrowdStrike is responsible.
    My questions are
    a. How would the Western media behaved if the company responsible had been a Chinese company?
    b. Would the USA and its G7 partners kept quiet?l

  • @aixtom979
    @aixtom979 Před měsícem

    I find funny that it happened on a Friday. Every admin or software developer you talk to, they all have a pretty solid rule of *not* pushing any updates to production systems on a Friday. So I wonder if there was some management pressure to "push it out this week, or else...."

  • @jeffreylawrence9172
    @jeffreylawrence9172 Před měsícem +3

    We need to know what their release procedures are and if they tested on similar system prior to release?

  • @juneduffy4502
    @juneduffy4502 Před měsícem +6

    Great have to wait another 2 years for a dr’s appointment - carry cash watch out for juggins (people who follow you home after withdrawing cash from an ATM )… imagine if it was an attack! It was a weird glitch 😮

  • @mumandtwins
    @mumandtwins Před měsícem +3

    If there is anything wrong with relying on digital this is it

  • @OngoingDiscovery
    @OngoingDiscovery Před měsícem +1

    Just FYI the Y2K bug was not "just a phantom". It took many people lots of man hours to fix and prepare systems for the millennium so that they were resilient. The fact that nothing bad happened (actually there were some less widespread effects) is testement to the hard work of those IT professionals, not proof that there was never a problem.

  • @JonitoFischer
    @JonitoFischer Před měsícem +12

    It's time to switch to linux!

    • @Innesb
      @Innesb Před měsícem

      Then hackers will put all their resources into hacking Linux, then companies will have to spend more resources protecting Linux, then one company will end up providing most of the cybersecurity software for Linux, then that company will make an error and exactly the same issues will occur for Linux users.
      People forget that the reason MS is so targeted is because it’s ubiquitous. If Linux was ubiquitous it would become the target. Its low usage on desktops means it’s not worth bad actors putting their resources into targeting Linux desktop users.

    • @fernandogirard9702
      @fernandogirard9702 Před měsícem +1

      It's tima to be not dependent on MS. Google, Amazon....follow the chinese.

    • @JonitoFischer
      @JonitoFischer Před měsícem +1

      @@Innesb this problem wasn't a security problem, it was a design flaw of the OS.

  • @6lack5ushi
    @6lack5ushi Před měsícem +5

    And we learned nothing

  • @joyjit_roy
    @joyjit_roy Před měsícem +1

    *Hello Theo, let me give some perspective to the level of headache this is from a corporate IT team perspective. Our company has 10k servers across the globe - all down. Last night MS reached out and our limited IT team last night (it's Saturday in India) could only bring up 250 something servers ! A lot of them we couldn't even log into ! And it was saturday night !*

  • @missyfrog1
    @missyfrog1 Před měsícem +2

    Is everyone ready to eliminate physical cash and go digital?

  • @CensoredbyYTforhavinganopinion

    I find it hard to believe the security update wasn't tested before being launched

  • @johneagle5553
    @johneagle5553 Před měsícem +6

    Watch the movie Eagle Eye the main character is Jerry Shaw (Shia LaBeouf)... this explains of what might come in the future... one of THOSE...

  • @tnetennba725_3
    @tnetennba725_3 Před měsícem +6

    1:21 guys look, the Internet is up there😮

    • @Tech-geeky
      @Tech-geeky Před měsícem

      "looks upwards towards the clouds"
      No answer

    • @tnetennba725_3
      @tnetennba725_3 Před měsícem +1

      @@Tech-geeky I meant at the top of Big Ben

    • @kmcat
      @kmcat Před měsícem

      @@tnetennba725_3 Must get a good signal up there

  • @rauladame2105
    @rauladame2105 Před měsícem +2

    30 seconds to a minute? This guy is clueless on the recovery effort.

  • @bmolitor615
    @bmolitor615 Před měsícem +1

    I'm having a Friday cocktail on my patio...

  • @andrewwatson5324
    @andrewwatson5324 Před měsícem +2

    It looks to me like Crowdstrike have been releasing untested updates. I would be thinking long and hard about their reliability.

  • @nickfromm5315
    @nickfromm5315 Před měsícem +16

    Crowd strike is a national security threat and should be outlawed.

    • @TheAnkit211
      @TheAnkit211 Před měsícem

      Mistaken.. its NSA's shady tool ..

  • @sun2020able
    @sun2020able Před měsícem +1

    everyone , everything in the world should have a backup plan - cash, printout of tickets, keep receipts and records in paper etc etc etc

  • @ZodyZody
    @ZodyZody Před měsícem +1

    You would think they would have had a back up system already in place.

  • @kanishkayapa468
    @kanishkayapa468 Před měsícem +1

    Stress the importance of thorough testing before deploying security updates

  • @flipnotrab
    @flipnotrab Před měsícem +28

    We all know unplugging the router for 12 seconds will fix this. But let’s see how it plays out…

    • @squirrelsinjacket1804
      @squirrelsinjacket1804 Před měsícem +1

      @@Abaddon231 What he said is what's referred to a "joke". Given the context it was clearly not meant to be taken literally. If you have autism you have my apologies.

    • @navigator590
      @navigator590 Před měsícem

      If only that was the truth in reality the IT clerk has to manually enter to each computer an delete a file from the CrowdStrike folder lol it’s horrible imagine millions of virtual machines and you have to manually fix each one of them.

    • @flipnotrab
      @flipnotrab Před měsícem

      @@navigator590 nope! Unplug the router

  • @siewheilou399
    @siewheilou399 Před měsícem +1

    Blue Screen of Death is the must have feature.

  • @Mauser1965
    @Mauser1965 Před měsícem +1

    Yes, love that closed source software solution that always still hasn't figured out how to patch. Meanwhile other system seemed to figure it out. As for Y2K, I did an example with a workstation at the time by setting the clock in the BIOS to 23:50 PST 12/31/99 and nothing happened when the clock changed to 01/01/00.

  • @hdcomputerkeith
    @hdcomputerkeith Před měsícem +5

    The greatest hack by a company lol!

  • @hfazh
    @hfazh Před měsícem

    Crowdstrike: “We stop breaches”… by bricking your PC

  • @Koraeffect
    @Koraeffect Před měsícem

    All these huge companies with millions of people relying on them should screen any updates before allowing it but what do I know ?

  • @leonsilec625
    @leonsilec625 Před měsícem +1

    To secure your servers, pc's and laptop, don't set that to automatic update. update it manually, more secure and safety.

    • @enadegheeghaghe6369
      @enadegheeghaghe6369 Před měsícem

      This wasn't a Microsoft windows update. Crowdstrike updates are silent and don't require your permission. You can't stop the updates if you have Crowdstrike Falcon software installed on your computer.

    • @enadegheeghaghe6369
      @enadegheeghaghe6369 Před měsícem

      This wasn't a Microsoft windows update. Crowdstrike updates are silent and don't require your permission. You can't stop the updates if you have Crowdstrike Falcon software installed on your computer.

  • @sarahchapman7863
    @sarahchapman7863 Před měsícem +1

    The NHS BANK staff network is completely down, so bank workers can’t sign up of shifts. The NHS relies heavily on BANK workers.

  • @TheTylerTT
    @TheTylerTT Před měsícem +2

    The amount of tech illiterate opinions going around is crazy

  • @Opinion_Box82
    @Opinion_Box82 Před měsícem +5

    I need a remote job am into cyber security ...

    • @Dvil5.0
      @Dvil5.0 Před měsícem

      How did you get into cybersecurity? Im from a non IT background and am interested

    • @furqanb7530
      @furqanb7530 Před měsícem

      F

  • @vulcan4d
    @vulcan4d Před měsícem +3

    Use Linux, no need for crowdstrike and updates install without a reboot needed to mess things up.

    • @nigh7swimming
      @nigh7swimming Před měsícem

      Linux could have failed the same, it just happened the bug in CS affected particular Windows versions.

  • @IDKTECHSPERTS
    @IDKTECHSPERTS Před měsícem

    The “blue screen of death” they mention at the start clearly shows a recovery screen ,not a blue screen of death and what they said was false. The company crowdstrike sent a bad driver through the update servers and while that was transferring it crashed the server, following that, the computers running windows all over the world broke down due to a bad driver.

  • @michalp1
    @michalp1 Před měsícem +2

    Crowdstrike will go bankrupt when everyone leaves them.

  • @kimc813
    @kimc813 Před měsícem +7

    This is so scary. We can see 1 company with a power that we never thought it has. A global outreach for a bug in an update. And they want a cashless and a tech society. For what? For this? Scary and dangerous.

  • @VirtualR
    @VirtualR Před měsícem +10

    The pressure the person who did the git push must be feeling right now...

    • @primordial_platypus
      @primordial_platypus Před měsícem +3

      Getting that CV updated no doubt.

    • @Bradley-Thomsen
      @Bradley-Thomsen Před měsícem +2

      @@primordial_platypusI don’t think prepping their CV will do them much good lol. They are probably going to need to change the industry they work in….
      Imagine being in an interview:
      Interviewer: “why are you looking to leave Crowdstrike?”
      Person: “Well I didn’t test my code before pushing to production and took down systems world wide…”
      Interviewer: “thanks for your time but I don’t think you’ll be a good fit…”

    • @primordial_platypus
      @primordial_platypus Před měsícem +1

      @@Bradley-ThomsenOn the other hand they now know the possible impact so will be extremely (possibly overly) careful and will insist on thorough testing. Maybe a job in QA would be appropriate.
      Of course I seriously doubt the failure can be traced to an individual. There would be multiple areas of failure from the lowest coder, spec generation, through testing and QA, then through distribution and maybe all the way into management. Sadly it will probably be one person that takes the fall for something they had no control over.

    • @LNatureblush
      @LNatureblush Před měsícem

      @@Bradley-Thomsen 🤣😂🤣😂

  • @Traceva
    @Traceva Před měsícem

    Excellent explanation. Best one yet

  • @sunshinestar2244
    @sunshinestar2244 Před měsícem +2

    Klaus schwab wanted to spoil your fun.

  • @lppoqql
    @lppoqql Před měsícem +7

    Its probably due to the CEO cutting corners on coders, I heard this was caused by some offshore guy.... Just like Boeing.

    • @CarTastic-fv6eo
      @CarTastic-fv6eo Před měsícem

      Or coders were DEI hires who has less competition but need to check representation boxes ...

    • @aisle_of_view
      @aisle_of_view Před měsícem

      Not the coders as much as the Quality Assurance team - the group who is supposed to test all updates and changes before they are released to the world.

  • @428Jonathon
    @428Jonathon Před měsícem +3

    Like medicine interacting with the human body. WOW the truth comes out!!

  • @happynowfarms
    @happynowfarms Před měsícem

    Everything on the same system, what could go wrong? Four companys control world food supplys, what could go wrong?

  • @Nonyobiz
    @Nonyobiz Před měsícem +7

    This is why CASH IS KING

    • @antispindr8613
      @antispindr8613 Před měsícem

      After all that has just happened to the online world - you really needed to ask that question?

    • @Nonyobiz
      @Nonyobiz Před měsícem

      @@antispindr8613 I didn't ask any question. I don't know what you are talking about bot.

  • @GhostShiroyama
    @GhostShiroyama Před měsícem +1

    Hey, start paying IT people a real salary and you wont have these problems. Its why i changed my career from IT to field technical work. Pays much better for easier work. Good fucking luck without us IT guys giving up or changing their career choices.

  • @user-ff2bs3ht3v
    @user-ff2bs3ht3v Před měsícem +1

    Why not hire and create your own cyber security team. Rather than rely on third party ?

    • @nntv86
      @nntv86 Před měsícem

      its all about money, cost/benefits. It is costly to have a cyber security team. The problem like this is very rare and should never expect to happen in the first place.

    • @Innesb
      @Innesb Před měsícem

      For the same reason businesses don’t develop their own software, don’t employ their own IT support team, etc. It’s a matter of cost and specialisation. It’s not feasible for every company to hire their own cybersecurity team.

    • @enadegheeghaghe6369
      @enadegheeghaghe6369 Před měsícem

      Do you have any idea how expensive , complicated and technical cyber security is?
      That's like saying every company should build their own cars instead of buying from established car manufacturers

  • @haineshisway
    @haineshisway Před měsícem

    And how will this company be held responsible?

  • @onyx7417
    @onyx7417 Před měsícem

    Best explanation I haven’t seen today !

  • @mandrael
    @mandrael Před měsícem +3

    Why not diversify to Linux. There are already many ATMs running Linux.

    • @Innesb
      @Innesb Před měsícem

      Agreed; diversification is the key, not ‘switching to Linux’ as many are proposing, otherwise Linux will simply become the target. I think this issue may cause many companies to consider diversifying their end-user PCs. At least, I hope so.

    • @STCatchMeTRACjRo
      @STCatchMeTRACjRo Před měsícem

      crowdstrike also provides its services/products to Linux as well, just this bad update was targeted for Windows

    • @enadegheeghaghe6369
      @enadegheeghaghe6369 Před měsícem

      Hahaha, Crowdstrike also has software that operates on Linux. Only it wasn't updated at the same time

    • @mandrael
      @mandrael Před měsícem

      @@Innesb I wouldn't diversify the end user PCs. They must be the same due to support. But I'd use Linux in the critical systems like servers and ATMs etc. Linux is more secure and doesn't need extra security software. Windows does. And this has nothing to do with the spread of the OS, but the security structure of the OS from the ground up. Linux was always a network and multiuser system. Windows was not.

    • @mandrael
      @mandrael Před měsícem

      @@enadegheeghaghe6369 Sure, but CrowsStrike is NOT a bare security AV system. This is only a small part. They offer mainly other things for businesses. Linux doesn't need AV and hasn't .sys-files or BSODs.

  • @user-ys3ju2un6b
    @user-ys3ju2un6b Před měsícem

    Is this why my laptop acting so weird

  • @fernandogirard9702
    @fernandogirard9702 Před měsícem +1

    Did you notice no problems in China? Yes, they do not use windows.

    • @ZHKu
      @ZHKu Před měsícem

      There were no problems in Russia either, we learned about it from the news. Windows has sanctioned us, so we're not affected by your system update:) We continued to work in our offices 😅💪

  • @tezinho81
    @tezinho81 Před měsícem

    This is a systemic issue and could happen again, only thorough testing and QA prevent such bugs. Wiser organisations control their patching and test new patches in non production environments before rolling them out to critical servers and clients.

  • @judsonmeraw6294
    @judsonmeraw6294 Před měsícem +1

    Disassociated thinking/operation methods strikes again. The tree of knowledge is not our play thing.

  • @unkown34x33
    @unkown34x33 Před měsícem

    what caused it?! incompetent CEO! and incompetent IT.... you always have to test an update before releasing it!

  • @christinerisden5799
    @christinerisden5799 Před měsícem

    Crowdstrike is based out of Austin,Texas.....

  • @cloudnsec
    @cloudnsec Před měsícem +3

    Great Participation from Ciaran, good questions asked and very grounded answers. Great reporitng!

  • @Manuel-kp1kp
    @Manuel-kp1kp Před měsícem +1

    Globally can’t be just a bug

  • @mysticmoontree
    @mysticmoontree Před měsícem +15

    People are stupid. Where are all the easy paper based manual backups. Pharmacies are required to also maintain a paper backup of medical records and its quite easy to simply call the drs office to verify a perscription request. The drs office is also legally required to maintain 10 years minimum of physical paper records or a safe digital backup that is easily accessed. All of these places being shut down by a computer not working without backup ways to function like they did easily before the advent of the internet is stupudity & negligence. Seriously dumb. Those of us who live and work rurally always have backup manual ways to function and do business because internet and power outages are commonplace.

    • @Tech-geeky
      @Tech-geeky Před měsícem +3

      You would think... but you can always tell how many "don't have this" by the reactions they make they freak out when they can't do their ob, they rely on tech.
      May as well call this 'an Apocalypse."

    • @seyumaiayami3536
      @seyumaiayami3536 Před měsícem +1

      Problem is most are BSOD, so you need bitlocker key and or be there in person to fix it/maybe network boot from lan.

    • @Innesb
      @Innesb Před měsícem

      The issue is not that they don’t have backup processes; it’s that the manual processes are vastly more inefficient than the digital solutions, which is why the digital solutions were implemented in the first place. For example, taking a phone call and checking the details of an appointment is trivial on-screen and time-consuming and error-prone on paper, especially when it is not your normal process.

    • @mysticmoontree
      @mysticmoontree Před měsícem

      @@Innesb that is not correct. Itsas if people forgot the wold existed just fine without computers and internet for generations. Its just that stupid technology focused companies try to cut corners and make more money by not training people on and maintaining a secondary emergency manual way to do business if systems go down.

    • @mysticmoontree
      @mysticmoontree Před měsícem

      @@Tech-geeky I believe the world has been on a slow apocalyptic march since 2020 & doesn't seem to want to change its destination.

  • @Noelly1980
    @Noelly1980 Před měsícem +8

    But lets go cashless with everything...

    • @cyberfunk3793
      @cyberfunk3793 Před měsícem +1

      What good is your cash if the register is down? Do you think they write receipts by hand in wallmart?

    • @Noelly1980
      @Noelly1980 Před měsícem

      @cyberfunk3793 Cash is king. Here in Australia, over the past couple of months, we have had plenty of technical outages where registers don't require internet or tech to operate. All those people that rely on their bank/credit cards were crippled. Walk in with cash, and everyone wants to know where you got it from... I mean, you do raise a good point. Most registers run software that is vulnerable to this type of scenario, but you'll always be one step ahead with cash. There are still places that don't run registers reliant on this stuff, and essentials can still be purchased with cash...

  • @Plarndude
    @Plarndude Před měsícem +6

    One bad update for one piece of software did all this?! Switch to Secure operating systems! Diversify the software you use!

    • @en1gma683
      @en1gma683 Před měsícem +1

      Tell that to my boss and cheap indie programs we use in tech support where people rather think we're packed with latest and most reliable technology 🤠

    • @nigh7swimming
      @nigh7swimming Před měsícem

      The issue has nothing to do with the O/S, it was a third party AV software failure.

    • @STCatchMeTRACjRo
      @STCatchMeTRACjRo Před měsícem +1

      diversify means more license and cost. also means IT team needs to handle more, so potential more manpower needed and more cost. companies dont want more costs.

  • @lungfamilyus
    @lungfamilyus Před měsícem

    Manual fix and with boot in safe mode with admin access. not 30 secs. probably 5~10 mins...

    • @STCatchMeTRACjRo
      @STCatchMeTRACjRo Před měsícem

      if not encrypted and allows boot from usb it can be done in 30 sec

  • @Angela-cc1hd
    @Angela-cc1hd Před měsícem +1

    It was inevitable that this would happen and it will happen more, as the system is overloaded and so complex that it is difficult to maintain. Technology is moving to fast. It may not have been a cyber attack but that is a distinct possibility in the future.Then everyone would have no Access to Anything or their money😮Going online for everything is not the answer. Updates do cause a lot of problems? 😮Remember the Post Office Scandal? Computer error on the system ?? 🤔

  • @JaredVeale
    @JaredVeale Před měsícem

    I don't see why Microsoft are being called out here, it wasn't their update. If you didn't have this particular endpoint detection then you're fine.

  • @hovercroft
    @hovercroft Před měsícem

    My gaming rig still working fine which is whats most important.

  • @davidherron9151
    @davidherron9151 Před měsícem +1

    Ready for cashless society?? No way.

  • @AntonyTCurtis
    @AntonyTCurtis Před měsícem

    Security services which are too successful need to be taxed to encourage competition.

  • @Sacto1654
    @Sacto1654 Před měsícem +1

    I think what made the problem worse was that windows 10 and Window 11 Enterprise editions *ALL* use the CrowdStrike Falcon software for malware protection by default. As such, when CrowdStrike's last update caused a system crash, it took down a massive number of computers criticial environment running Windows. People who ran Windows 10 and 11 versions using Windows Defender software interestingly were not affected, though.

  • @onx99
    @onx99 Před měsícem

    The world needs to sue the security company that made the update, it was not from Microsoft.

  • @GrandpaVince
    @GrandpaVince Před měsícem +2

    As we all know vince is an expert on these things

    • @syamkumarkaturi9761
      @syamkumarkaturi9761 Před měsícem

      Un install software up date

    • @Tech-geeky
      @Tech-geeky Před měsícem

      @@syamkumarkaturi9761 not all updates can be uninstalled. Or is that just major updates?

  • @wavydavy9816
    @wavydavy9816 Před měsícem

    I always avoided becoming a coder or a programmer because I figured I was perhaps a bit too stupid or laxidasical in my work ethic, but apparently those aren't the barriers that I thought they were

  • @robertkennedy9188
    @robertkennedy9188 Před měsícem

    Did they try turning it off and turning it on again

  • @alabamaflip2053
    @alabamaflip2053 Před měsícem

    Well I feel better now.
    I thought it could have been a soon to be ex-employee of CrowdStrike.
    I thought maybe professional hackers around the world were getting a lot of new information today. Like where to really strike.
    I thought rolling out updates on Friday was bad as well as not testing them.
    I thought regional roll outs were a thing.
    Now I know it was just a mistake that two America Companies get a free pass on. Whew!, that was a close one.

  • @yairramirez7214
    @yairramirez7214 Před měsícem

    They stop breaches breaking the whole device 😂