Re: Higgenbotham's Dark Age Hovel
Posted: Sat Jul 20, 2024 2:47 am
The global rollout of "probably one of the worst updates we've ever seen of any software company ever" will have big ramifications for the IT industry, an expert says.
Global services are slowly recovering from a crippling software update issued by cybersecurity firm CrowdStrike on Friday (NZ time).
Airlines, healthcare, shipping, finance, TV networks, transport networks and more around the world were affected by the faulty update, which crashed Microsoft Windows-powered computers so badly they could not be easily restored with a simple restart.
Companies are now dealing with backlogs of delayed and cancelled flights and medical appointments, missed orders and other issues that could take days to resolve.
CrowdStrike chief executive George Kurtz released a statement confirming the outages experienced worldwide were the result of what he called a defect found in a single content update for Windows hosts.
He confirmed that the outages were not the result of a security incident or any kind of cyber attack.
"Clearly this is a 'black eye' moment, not just for CrowdStrike but I think the overall IT industry," Tech analyst Daniel Ives of Wedbush Securities told RNZ.
"It's something where I think for weeks and months ahead they'll be studying this. I'd expect there'll be regulatory hearings, you know, on Capitol Hill, and for Crowdstrike it's about brand reputation, it's about containing the damage in essentially what's a code red situation not just for CrowdStrike, but I see the cybersecurity industry globally."
https://www.rnz.co.nz/news/world/522636 ... een-expertThe New Zealand government was likely to join the international community in questioning how a single software company can cause the biggest IT meltdown the world has ever seen.
Acting Prime Minister David Seymour told RNZ "government agencies will also be assessing how we responded to this, what else could have gone wrong, what else we might have done, as is responsible in any event like this occurs".
"As someone that takes an interest in technology and software in the way that it's developing, I was quite surprised this one company could have such a large effect. And I'm sure that there will be questions around the level of redundancy that's built into systems… I'm sure there'll be questions about how a software update is rolled out simultaneously right around the world.
"I have to say that most of those questions, at a technical level, are well above my pay grade. But I'm sure that the government will be asking those questions in the days and weeks to come."
https://therecord.media/it-teams-scramb ... rowdstrikeBoth Neuberger and U.S. Secretary of State Antony Blinken spoke at length at the conference about what they felt was the source of the disaster: the consolidation of technology among a handful of companies.
“The irony of this morning is that a major international cyber security company was impacted,” she said.
“We need to really think about our digital resilience, not just in the systems we run, but in the globally connected security systems. The risks of consolidation, how we deal with that consolidation, and how we ensure that if an incident does occur, it can be contained and we can recover quickly.”
Blinken said it is imperative that organizations globally build resilience and redundancy back into critical systems but added that the world cannot be reliant “on any single point of failure.”
“We've been doing that with supply chains across the world, building coalitions of countries to make sure that we're coordinating on supply chains,” Blinken added. “Build new ones, and making sure that if we see a problem, we can address it immediately.”
Several recent incidents involving sector leaders like Microsoft, UnitedHealth Group and Snowflake have validated concerns about the consolidation of the technology industry around a small group of companies.