19 July 2024 | Updated 22 July 2024
A major IT outage caused major disruptions at airports, GP surgeries, and retail stores.
Computer systems across the world crashed, experiencing the “Blue Screen of Death”, including airport departure screens, check-in systems, checkout machines in shops and the NHS app.
Many, including American Airlines and the Swiss Federal Office for Cyber Security, blamed a faulty update or misconfiguration from cybersecurity firm CrowdStrike. The update that has been automatically rolled out to servers and computer endpoints was believed to contain a corrupt driver file that causes machines to crash and display the “Blue Screen of Death”.
Crowdstrike later confirmed that it was caused by a single content update which is causing Windows to crash and get stuck in a recovery loop.
Francis West, CEO of Security Everywhere and cybersecurity expert, outlined the resulting Microsoft 365 service outage:
“Microsoft 365 service outage is being caused by a configuration change to Azure AD which is affecting a number of Microsoft services including: OneDrive, SharePoint, Teams, Power BI, Purview, Defender, InTune, OneNote and XBox live.
“The UK has not been badly affected as it has a lot of its own M365 infrastructure, and the root cause is an update to the Azure infrastructure in the US.”
What Next? The Expert’s View
.jpg)
Picture: a photograph of Francis West. Image Credit: Security Everywhere
Crowdstrike says that the issue has been “identified, isolated and a fix has been deployed” and that the outage is not down to a “security incident or cyberattack”. We asked Francis about the next steps companies might be taking:
“The only way to recover is to reboot each machine in safe mode and perform a system recovery, which poses challenges for small businesses without that technical expertise in-house.
“These events could point to a lack of proper testing before deploying such a widespread update – but that remains to be seen.
“It’s possible that many FM companies, and companies in their supply chain, might be using CrowdStrike and facing challenges due to the incident, putting cybersecurity measures and contingency planning to the test.”
Picture: a photograph showing two people sitting opposite each other working on laptops. Image Credit: Pexels
Article written by Ella Tansley | Published 19 July 2024
Share
Related Articles
Outdated Technology is Costing the Public Sector £45 Billion a Year
One in four digital systems used by central government are outdated, costing the public sector £45 billion in productivity savings.
This figure equates to paying...
Read Full Article
Security Everywhere – Cyber Security Essentials Q&A Part Three
In Part 3 of our cyber security Q&A, Sheldon Reynolds talks us through the danger of reusing passwords and what happens on the dark web.
According to data...
Read Full Article
The Rise of Impersonation Attacks – How Businesses Can Safeguard Their Emails
The cyber threat landscape is evolving at an alarming rate, and there's a new player in town that's causing mayhem in inboxes: impersonation attacks.
In this...
Read Full Article
Security Everywhere – Cyber Security Essentials Q&A Part Two
In Part 2 of our Q&A with cyber security expert Francis West, we discuss simple actions we can all take to be more cyber safe, what to do if you receive a suspicious...
Read Full Article
Security Everywhere – Cyber Security Essentials Q&A Part One
Learn more about the realities of cyber crime in this Q&A with cyber security expert Francis West.
From Whatsapp fraud to investment scams, cyber crime has...
Read Full Article
UK Data Centres Designated as Critical Infrastructure
UK data centres are now classed as critical national infrastructure, the same status associated with energy supply, water supply, transportation, health and...
Read Full Article
Reported Ransomware Incidents in UK Doubled in 2023
A Freedom of Information request has revealed that there was a resurgence in ransomware-related incidents following a quieter 2022.
In the first six months...
Read Full Article
Spotlight Interview – Francis West | Security Everywhere
Francis West is CEO of Security Everywhere, a company which helps SMEs to secure their money, data and reputation with managed security services.
Francis is a trusted...
Read Full Article
Interserve Fined £4.4m for Failure to Keep Staff Details Secure
The UK’s IT security watchdog has fined Interserve for breaching data protection law and failing to prevent a cyber attack.
The Information Commissioner’s...
Read Full Article
How to Identify and Address IoT Security Weaknesses
Data-driven facilities management is now the expected norm, but security concerns about IoT systems still remain amongst FMs and tenants.
The Internet of Things (IoT)...
Read Full Article