Washington:

CrowdStrike, the cybersecurity company that caused a global computer outage last week, on Wednesday said that the breakdown stemmed from a flaw in its test software.

In an incident report, the company said the glitch was pushed out to millions of Windows computers and that the company will change the way it handles such updates in the future.

“Due to a bug in the content validator, one of two (updates) passed validation despite containing problematic content data,” said CrowdStrike.

CrowdStrike’s Falcon software is used by businesses around the world to better identify and handle malware and security breaches.

The type of update that caused the crash, which is frequently deployed by the company, will from now on be sent out gradually, so that problems can be detected before they are released at scale.

“A full-blown rollout from a security vendor to every customer within minutes is very dangerous,” Dave DeWalt, the former chief executive of cybersecurity company McAfee, told the Wall Street Journal.

CrowdStrike said on Monday that about 8.5 million devices were impacted by the outage, and warned customers that malicious actors were trying to take advantage of the situation.

A wide range of industries were hit by the outage, with users confronted with “blue screens of death” that made rebooting impossible.

The airline industry was hit most visibly by the crash, with US carrier Delta Airlines particularly affected.

The company said on Tuesday that it only expected a full return to normal on Thursday.

CrowdStrike CEO George Kurtz has been summoned by the US Congress to explain the incident.

(Except for the headline, this story has not been edited by NDTV staff and is published from a syndicated feed.)

Students, who are studying in Bangladesh, upon their arrival following protest against the government job quota, at the Akhura Check post, in Agartala, on July 20, 2024.
| Photo Credit: PTI

Nipah virus resurfaces in Malappuram, 15-year-old boy in critical condition

Nipah virus scare resurfaced in Malappuram on July 20 following the confirmation of a case currently under treatment at a private hospital in Kozhikode. A 15-year-old boy from Chembrassery, near Pandikkad, in Malappuram district developed Nipah symptoms and was shifted to Kozhikode from a hospital at Perinthalmanna. The child is reported to be in a critical condition and is on ventilator support at the Kozhikode Government Medical College Hospital.

‘I took a bullet for democracy,’ Trump says at first rally since shooting

Donald Trump, holding his first campaign rally since surviving an assassination attempt, dismissed concerns that he is a threat to democracy, triumphantly telling a cheering crowd: “Last week I took a bullet for democracy.” “I’m not an extremist at all,” he continued at the rally in swing state of Michigan, dismissing his reported links to Project 2025.

New NCERT Class 6 social science textbook shrinks content, rolling three books of history, geography, civics into one

The new Social Science textbook for Class 6 is a heavily truncated amalgamation of what was earlier three separate books for History, Geography, and Civics published by the National Council of Educational Research and Training (NCERT). Students in Class 3 and Class 6 are getting new textbooks for the 2024-25 academic year. Class 6 students will get a single Social Science text, titled Exploring Society — India and Beyond. The Hindu had earlier reported that the National Syllabus and Teaching Learning Material Committee was considering merging three books into one.

NEET-UG paper leak case: CBI arrests ‘mastermind’, two members of ‘solver gang’ in NEET-UG paper leak case

The Central Bureau of Investigation (CBI) investigating the paper leak of the National Eligibility-cum-Entrance Test (Undergraduate) 2024 on Saturday arrested the mastermind and two other MBBS students who allegedly acted as ‘solvers’ in the NEET-UG paper leak case.

Somnath Bharti moves Delhi HC challenging election of BJP MP Bansuri Swaraj

Aam Aadmi Party leader Somnath Bharti on Saturday moved the Delhi High Court, challenging the election of new BJP MP Bansuri Swaraj, citing alleged corrupt practices. Both Mr. Bharti and Ms. Swaraj had contested the Lok Sabha election from the New Delhi constituency.

Israeli military says it has struck several Houthi targets in Yemen in response to attacks

The Israeli Army said on July 13 it has struck several Houthi targets in western Yemen following a fatal drone attack by the rebel group in Tel Aviv the previous day. The Israeli strikes appeared to be the first on Yemeni soil since the Israel-Hamas war began in October.

India evacuates students from Bangladesh, U.S. says situation ‘extremely volatile and unpredictable’

Since the beginning of the clashes between students and security forces in Bangladesh, India has evacuated 978 nationals who were studying in various institutions in Bangladesh, the Ministry of External Affairs (MEA) has said. The evacuation is part of security measures that the Indian officials in the High Commission in Dhaka and in the Assistant High Commissions are taking to ensure the safety of around 8,000 Indian students.

Microsoft says about 8.5 million of its devices affected by CrowdStrike-related outage

A global tech outage that was related to a software update by cybersecurity firm CrowdStrike affected nearly 8.5 million Microsoft devices, Microsoft said in a blog post on July 20. “We currently estimate that CrowdStrike’s update affected 8.5 million Windows devices, or less than one percent of all Windows machines,” it said in the blog.

37 of the 50 top-scoring NEET centres are clustered in Rajasthan’s Sikar district

An analysis of NEET-UG 2024 results shows that many students scoring high marks were clustered in particular centres located in certain cities or States. The National Testing Agency published the undergraduate medical entrance examination scores of 23,33,162 candidates on Saturday after the Supreme Court directed that the data be made public.

9 held in Bihar for impersonating Teachers Recruitment Exam candidates

The Bihar Police has arrested nine persons over the past 24 hours for allegedly appearing in the Teachers Recruitment Exam (TRE-3) on behalf of actual candidates. The third phase of the teacher recruitment exam is being conducted by the Bihar Public Service Commission (BPSC) from July 19 to July 22.

New Delhi:

“What is CrowdStrike? Why is my Windows computer showing the Blue Screen of Death? Who is responsible for the biggest-ever IT outage?”

These are questions that have dominated conversations across the globe after a Microsoft error brought Windows computers to its heels. While it is now known that an update to an anti-virus program ‘Falcon Sensor’ by CrowdStrike was responsible for the massive worldwide outage, people have still been wondering how such a defective update was allowed to be released and who was behind it.

Step in Vincent Flibustier, an X user parading to be a Crowdstrike employee. Vincent broke the internet with an altered, AI-generated photo of him outside the CrowdStrike office along with the caption, “First day at Crowdstrike, pushed a little update and taking the afternoon off.”

First day at Crowdstrike, pushed a little update and taking the afternoon off pic.twitter.com/bOs4qAKwu0

— Vincent Flibustier (@vinceflibustier) July 19, 2024

The photo went viral within minutes and already has nearly 4 lakh likes and has been shared by over 36,000 users.

Two hours later, Flibustier posted another update – the company had fired him. He also shared a short video where he takes ‘responsibility’ for causing the global outage.

Vincent Flibustier also changed his X (former Twitter) bio to accompany the parody. His bio said, “Former Crowdstrike employee, fired for an unfair reason, only changed 1 line of code to optimize. Looking for a job as Sysadmin.”

While he was trying to make a joke about it, thousands online bought his satire and thought he was the one responsible for the Blue Screen of Death (BSOD) on their system. Airlines, banks, TV channels, and several other industries were scrambling to deal with the issue, and people on social media went into overdrive after finding the ‘culprit’.

While several users praised him for ensuring that they don’t have to work on a Friday, some posted abusive messages about him.

The truth: Vincent is a satirical writer who runs Nordpresse, a Belgian parody news site. He appeared as a guest on France TV, where he remarked, “People are drawn to stories that confirm their preconceptions.”

Explaining further why people on the internet immediately latched on to his joke, he said, “No culprit named yet, I bring it on a platter, people like to have a culprit. The culprit seems completely stupid, he is proud of his stupidity, he takes his afternoon off on the first day of work. This falls right into a huge buzz in which people absolutely need to have new information, and a fake is by nature new, you won’t read it anywhere else.”

He also said that the post was shared by those who knew it was a joke, but the amplification sent it into a zone where people took every word of the tweet literally.

Millions of users across the globe are still facing issues, with both Microsoft and CrowdStrike trying to resolve the issue at the earliest.

The latest version of its Falcon Sensor software was meant to make CrowdStrike clients’ systems more secure against hacking by updating the threats it defends against. However faulty code in the update files resulted in one of the most widespread tech outages in recent years for companies using Microsoft’s Windows operating system.

Problems came to light quickly after the update was rolled out on Friday, and users posted pictures on social media of computers with blue screens displaying error messages. These are known in the industry as “blue screens of death.”

CrowdStrike, the cybersecurity company behind a massive global IT outage, is a leader in its sector, known for building software defenses for the cloud computing age and exposing Russian and North Korean threats.

Based in Austin, Texas, the company was founded in 2011 by George Kurtz, Dmitri Alperovitch, and Gregg Marston.

Both Kurtz and Alperovitch had extensive backgrounds in cybersecurity, working at companies like McAfee.

Two years after its founding, CrowdStrike launched its signature product, the Falcon platform.

– Top player –

Crucially, the company embraced a “cloud-first” model to reduce big computing needs on customers and provide more effective protection.

Rather than just focusing on malware and antivirus products, the founders wanted to shift attention to identifying and stopping the attackers themselves and their techniques.

“CrowdStrike is one of the best known cybersecurity companies around,” said Michael Daniel, who worked as the White House cybersecurity coordinator during Barack Obama’s administration.

“It provides typically what we think of as sort of endpoint protection, meaning that it’s actually got software running on a server, or on a particular device, like a laptop or a desktop and it’s scanning for potential malware connections to bad domain names,” he said.

“It’s looking for behavior that might be unusual, that sort of thing,” said Daniel who now runs the Cyber Threat Alliance.

The company’s share price was down by about 9 percent in morning trading on Wall Street.

CrowdStrike became a publicly traded company in 2019 and the company’s total revenue in the last quarter was $921 million with projections of brining in about $4 billion in the current fiscal year.

The company’s main competitor is Palo Alto Networks as well as SentinelOne, which are standalone cybersecurity firms.

Cloud computing giants Microsoft, Amazon and Google also provide their own cybersecurity software and are rivals.

– North Korea hack –

But CrowdStrike is also a cyber intelligence company and made headlines when it was involved in investigating several high-profile cyberattacks.

Most famously, in 2014, CrowdStrike discovered evidence linking North Korean actors to the hack of servers at Sony Pictures.

The hackers stole large amounts of data and threatened terrorist acts against movie theaters to prevent the release of “The Interview,” a comedy about North Korea’s leader.

The studio initially canceled the movie’s theatrical release, but reversed its decision after criticism.

Sony estimated the direct costs of the hack to be around $35 million for investigating and remediating the breach.

CrowdStrike also helped investigate the 2015-2016 cyber attacks on the Democratic National Committee (DNC) in the United States and their connection to Russian intelligence services.

In December 2016, CrowdStrike released a report stating that a Russian government-affiliated group called Fancy Bear had hacked a Ukrainian artillery app, potentially causing significant losses to Ukrainian artillery units.

However, this assessment was later disputed by some organizations and CrowdStrike rolled back some of the claims.

– Criticism of Microsoft –

In recent months, CrowdStike has criticized Microsoft for its lapses on cyber security as the Windows maker admitted to vulnerabilities and hackings by outside actors.

Among other criticisms, CrowdStrike slammed Microsoft for still doing business in China.

“You’re telling the public they can’t use Huawei, and they can’t let kids watch dance videos on TikTok because China is going to collect intelligence,” Shawn Henry, chief security officer at CrowdStrike said last year.

“Yet the most ubiquitous software, which is used throughout the government and throughout every single corporation in this country and around the world, has engineers in China working on their software,” Henry told Forbes.

 

(This story has not been edited by NDTV staff and is auto-generated from a syndicated feed.)

Businesses and services around the world are slowly recovering after a massive IT outage affected computer systems worldwide on Friday. Experts, however, said full recovery from the huge crash would take “some time.”

Here are 10 points on the big story

New Delhi:
Airlines, banks and businesses across the world were scrambling today to deal with one of the biggest IT crashes in recent years, caused by an update to an antivirus program. The US grounded all planes briefly; flights in other nations were affected.

Here’s your 10-point cheat sheet to this big story

New Delhi:

Services across multiple sectors were affected worldwide today due to a technical problem at the US tech giant Microsoft and American cyber security company Crowdstrike.

Millions of Microsoft windows users were experiencing the “Blue Screen of Death” error that caused their computers to shut down or restart.

Microsoft said the preliminary root cause was a “configuration change” in a portion of its Azure backend workloads. It caused interruption between storage and compute resources which resulted in connectivity failures that affected downstream Microsoft 365 services dependent on these connections, the company said.

“Our services are still seeing continuous improvements while we continue to take mitigation actions,” Microsoft said in a post on X.

Services Affected In India Due To Microsoft Outage

Airlines 

Airlines in India reported that their systems across the network were impacted by the ongoing outage in Microsoft. 

“Our systems across the network are impacted by an ongoing issue with Microsoft Azure, which has resulted in increased wait times at our contact centres and airports. You may experience slower check-ins and longer queues,” Indigo said in an advisory.

Akasa Air and SpiceJet also reported similar disruptions. 

“Due to infrastructure issues with our service provider, some of our online services, including booking, check-in and manage booking services will be temporarily unavailable,” Akasa Air said in post on X.

“We’re currently facing a technical issue in providing updates on flight disruptions. Our team is actively working to resolve this issue. We regret any inconvenience caused and will update you once the issue is resolved. Thank you for your patience and co-operation,” SpiceJet posted on X.

Microsoft Apps

The users were also unable to access various Microsoft apps and services.

Microsoft 365, Microsoft Team, and Microsoft Azure were among the services that were affected.

New Delhi:

A major tech issue has affected millions of Windows computer systems worldwide, causing a sudden shutdown or restart. Microsoft Inc. said the error is due to a recent CrowdStrike update.

According to Microsoft’s Service Health Status updates, the preliminary root cause is “a configuration change in a portion of our Azure backend workloads (that has) caused interruption between storage and compute resources, and which (has) resulted in connectivity failures…”

These failures, the company said, had affected “downstream (and dependent) Microsoft 365 services”.

CrowdStrike Engineering – a cybersecurity services firm that works with Microsoft – has identified a content deployment related to this issue and reverted those changes.

The company has posted steps for resolution for affected Windows users.

Workaround

What Microsoft Said

In a detailed thread on X, the software services giant said it is “investigating an issue impacting users ability to access various Microsoft 365 apps and services”.

READ | Windows Systems Restarting, Throwing ‘Blue Screen Of Death’ Errors

“We’re working on rerouting impacted traffic to alternate systems to alleviate impact in a more expedient fashion,” Microsoft said, adding, “We’re still observing a positive trend in service availability while we continue to redirect impacted traffic.”

We’re working on rerouting the impacted traffic to alternate systems to alleviate impact in a more expedient fashion. More info is posted in the admin center under MO821132 and on https://t.co/Htn4qQEnsp

— Microsoft 365 Status (@MSFT365Status) July 19, 2024

“We still expect users will continue to see gradual relief as we continue to mitigate the issue.”

Our services are still seeing continuous improvements while we continue to take mitigation actions. More details can be found within the admin center under MO821132 and https://t.co/Htn4qQEnsp

— Microsoft 365 Status (@MSFT365Status) July 19, 2024

Services are seeing “continuous improvements while we continue to take mitigation actions”.

READ | What Microsoft Said After Global Outage Hits Flight, Bank Ops

“We remain committed in treating this event with the highest priority and urgency while we continue to address the lingering impact for the remaining Microsoft 365 apps that are in a degraded state.”

Affected And Recovering Microsoft Services

Microsoft said impacted services may include, but are not limited to, services and software like PowerBI, Fabric, and Teams, as well as the Microsoft 365 admin center.

READ | Flights, Markets, Banks, Stock Exchange: Microsoft Outage Crippling Sectors

It also said “internal telemetry and customer signals” suggest some services had recovered, at least partially. These include Defender, OneNote, OneDrive for Business, and SharePoint Online.

Worldwide Windows Outage Impact

Services, including critical providers like police and government, across the world have been affected.

In India, SpiceJet has said it is experiencing “technical challenges” that have affected online ticket booking and check-in, as well as other functionalities.

” We kindly request passengers with upcoming travel plans to arrive at the airport earlier than usual to complete check-in at our counters,” the airline said on X.

New airline Akasa Air and industry veterans IndiGo have put out similar messages. Flight services at Chennai and Mumbai airports have also begun to be affected, sources have told NDTV.

pic.twitter.com/SI8mcURA1H

— IndiGo (@IndiGo6E) July 19, 2024

Around the world, Australia’s Virgin Australia said it is “aware of a large-scale IT outage impacting airlines and other businesses” and that it too had been affected.

“We are working to resolve this issue as soon as possible…” the airline said.

There are reports of flights being grounded in Australia and the United States.

Melbourne Airport is experiencing a global technology issue which is impacting check-in procedures for some airlines. Passengers flying with these airlines this afternoon are advised to allow a little extra time to check-in. Please check with your airline for flight updates. pic.twitter.com/pFjOjReMKX

— Melbourne Airport (@Melair) July 19, 2024

In the former country, the airports in Sydney and Melbourne have cited a “global technology issue” impacting its services. Contingency plans have been activated, both airports said.

Reuters, meanwhile, has reported of services being affected at the airport in German capital Berlin, and Spanish airport operators have confirmed an “incident” at their facilities, the BBC reported.

The tech problem has affected banks and financial services also, with reports the London Stock Exchange faces minor problems. The United Kingdom’s Sky News network is off air, the BBC said.

NDTV is now available on WhatsApp channels. Click on the link to get all the latest updates from NDTV on your chat.

New Delhi:

Millions of Windows users across the globe are experiencing the Blue Screen of Death (BSOD) error which is causing the system to suddenly shut down or restart. Microsoft in a message said that the error is being caused due to a recent CrowdStrike update.

The bug has affected several companies, banks and government offices across the globe. Most Indian airlines have taken to X (formerly Twitter) to share the update with fliers.

#TravelUpdate: Due to infrastructure issues with our service provider, some of our online services, including booking, check-in and manage booking services will be temporarily unavailable. Currently we are following manual check-in and boarding processes at the airports and hence…

— Akasa Air (@AkasaAir) July 19, 2024

Social media users posted pictures showing their screens stuck on the recovery page displaying the message: “It looks like Windows didn’t load correctly. If you’d like to restart and try again, choose Restart my PC below.”

I am aware of a large-scale technical outage affecting a number of companies and services across Australia this afternoon.

Our current information is this outage relates to a technical issue with a third-party software platform employed by affected companies.

— National Cyber Security Coordinator (@AUCyberSecCoord) July 19, 2024

Major US carriers including American Airlines, Delta Airlines and United Airlines issued ground stops on Friday morning citing communication issues. US Secretary of Transportation Pete Buttigieg said the department was monitoring the flight cancellation and delay issues at Frontier, adding that the agency will hold the company and all other airlines “to their responsibilities to meet the needs of passengers”.

Microsoft, in a statement, said it was taking “mitigation actions” after service issues. “Our services are still seeing continuous improvements while we continue to take mitigation actions,” the company said in a post on X.

What is Blue Screen of Death

Blue Screen errors, also known as black screen errors or STOP code errors, can occur when a critical issue forces Windows to unexpectedly shut down or restart. You may encounter a message stating, “Windows has been shut down to prevent damage to your computer” or a similar notification.

These errors can stem from hardware or software problems. If you recently installed new hardware and encountered a Blue Screen error, try shutting down your PC, removing the new hardware, and attempting to restart. If restarting poses difficulty, you can initiate your PC in safe mode. For detailed steps, refer to the instructions on starting your PC in safe mode in Windows.

Additionally, consider updating Windows with the latest patches through Windows Update, seeking assistance from other sources, or restoring Windows to a previous restore point.

How to Fix Windows Blue Screen Error

If none of these measures resolve the Blue Screen error, utilize the Blue Screen Troubleshooter available in the Get Help app:

• Open the Get Help app in Windows.
• Type “Troubleshoot BSOD error” in the search bar of the Get Help app.
• Follow the step-by-step instructions provided in the Get Help app.