Crowdstrike is blaming a bug in an update that allowed its cybersecurity systems to push bad data out to millions of customer computers, setting off last week’s global tech outage that grounded flights, took TV broadcasts off air and disrupted banks, hospitals and retailers.Crowdstrike also outlined measures it would take to prevent the problem from recurring, including staggering the rollout of updates, giving customers more control over when and where they occur, and providing more details about the updates that it plans.
The company on Wednesday posted details online from its âpreliminary post incident review â of the outage, which caused chaos for the many businesses that pay for the cybersecurity firm’s software services. The problem involved an âundetected errorâ in the content configuration update for its Falcon platform affecting Windows machines, the Texas company said.
A bug in the content validation system allowed âproblematic content dataâ to be deployed to Crowdstrike’s customers. That triggered an âunexpected exceptionâ that caused a Windows operating system crash, the company said. As part of the new prevention measures, Crowdstrike said it’s also beefing up internal testing as well as putting in place âa new check” to stop âthis type of problematic contentâ from being deployed again.