{"id":100977,"date":"2024-07-24T11:42:28","date_gmt":"2024-07-24T11:42:28","guid":{"rendered":"https:\/\/news.talkwithrattan.com\/index.php\/2024\/07\/24\/crowdstrike-pledges-to-improve-testing-after-it-outage\/"},"modified":"2024-07-24T11:42:28","modified_gmt":"2024-07-24T11:42:28","slug":"crowdstrike-pledges-to-improve-testing-after-it-outage","status":"publish","type":"post","link":"https:\/\/news.talkwithrattan.com\/index.php\/2024\/07\/24\/crowdstrike-pledges-to-improve-testing-after-it-outage\/","title":{"rendered":"CrowdStrike pledges to improve testing after IT outage"},"content":{"rendered":"<div style=\"text-align:center\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/i3.wp.com\/ichef.bbci.co.uk\/news\/1024\/branded_news\/acec\/live\/2035cad0-49b1-11ef-8957-57bc56098a6f.jpg?resize=1024,576&amp;ssl=1\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"CrowdStrike pledges to improve testing after IT outage\" title=\"CrowdStrike pledges to improve testing after IT outage\" \/><\/div><p> <br \/>\n<\/p>\n<div data-component=\"text-block\">\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">CrowdStrike has promised to improve how it tests software after its faulty content update for Windows systems caused a mass global IT outage on Friday.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">The cybersecurity company&#8217;s mistake resulted in problems for banks, hospitals and airlines as millions of PCs displayed &#8220;blue screens of death&#8221;. <!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">In a detailed review of the incident <!-- --><a target=\"_blank\" href=\"https:\/\/www.crowdstrike.com\/falcon-content-update-remediation-and-guidance-hub\/\" class=\"sc-c9299ecf-0 bZUiKB\" rel=\"noopener\">published on Wednesday<!-- --><\/a>, CrowdStrike said the problem occurred due to a &#8220;bug&#8221; in the system which was meant to check software updates were working properly.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">The glitch meant its system did not identify &#8220;problematic content data&#8221; in a file.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">The company said it could prevent the incident from happening again with better software testing and checks, including more scrutiny from developers.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">The faulty update crashed 8.5 million Microsoft Windows computers around the world and George Kurtz, Crowdstrike&#8217;s boss, has apologised <!-- --><a target=\"_self\" href=\"https:\/\/www.bbc.co.uk\/news\/articles\/cg3m4jgdprxo\" class=\"sc-c9299ecf-0 bZUiKB\" rel=\"noopener\">for the impact of the outage<!-- --><\/a>.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">But cybersecurity experts told BBC News that the review revealed &#8220;major mistakes&#8221; were made by the firm.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">&#8220;What\u2019s clear from the post mortem is they didn&#8217;t seem to have the right guardrails in place to prevent this type of incident or to reduce the risk of it occurring,&#8221; said cyber-security consultant Daniel Card.<!-- --><\/p>\n<\/div>\n<div data-component=\"text-block\">\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">His thoughts were echoed by cybersecurity researcher Kevin Beaumont, who said the key lesson from CrowdStrike&#8217;s review was that the firm doesn&#8217;t &#8220;test in waves&#8221;.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">&#8220;They just deploy to all customers at once in a so called &#8216;rapid response update&#8217; which was obviously a huge mistake,&#8221; he said.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">But Sam Kirkman from cybersecurity firm NetSPI told the BBC the review showed CrowdStrike &#8220;took steps&#8221; to prevent the outages.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">He said these steps &#8220;have likely been effective to prevent incidents on countless occasions prior to last week\u201d.<!-- --><\/p>\n<\/div>\n<div data-component=\"text-block\">\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">According to insurance firm Parametrix, the top 500 US companies by revenue, excluding Microsoft, had faced some $5.4bn (\u00a34.1bn) in financial losses from the outage.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">It told Reuters that only $540m (\u00a3418m) to $1.08bn (\u00a3840m) of these losses were insured.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">Meanwhile, Mr Kurtz has been called to testify in front of Congress about the outage.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">&#8220;This incident must serve as a broader warning about the national security risks associated with network dependency,&#8221; it said <!-- --><a target=\"_blank\" href=\"https:\/\/homeland.house.gov\/wp-content\/uploads\/2024\/07\/CrowdStrike-Software-Update-Letter_FINAL.pdf\" class=\"sc-c9299ecf-0 bZUiKB\" rel=\"noopener\">in a letter to Mr Kurtz<!-- --><\/a>.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\">It has given the cybersecurity company until Wednesday evening to respond by scheduling a hearing.<!-- --><\/p>\n<p class=\"sc-eb7bd5f6-0 fYAfXe\"><i id=\"additional-reporting-by-joe-tidy\" class=\"sc-7dcfb11b-0 kKcaog\">Additional reporting by Joe Tidy<!-- --><\/i><\/p>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/www.bbc.com\/news\/articles\/ce58p0048r0o\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>CrowdStrike has promised to improve how it tests software after its faulty content update for Windows systems caused a mass global IT outage on Friday. The cybersecurity company&#8217;s mistake resulted in problems for banks, hospitals and airlines as millions of PCs displayed &#8220;blue screens of death&#8221;. In a detailed review of the incident published on [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":100978,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","fifu_image_url":"https:\/\/ichef.bbci.co.uk\/news\/1024\/branded_news\/acec\/live\/2035cad0-49b1-11ef-8957-57bc56098a6f.jpg","fifu_image_alt":"","footnotes":""},"categories":[604],"tags":[21329,4207,1732,5142,10169],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/posts\/100977"}],"collection":[{"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/comments?post=100977"}],"version-history":[{"count":1,"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/posts\/100977\/revisions"}],"predecessor-version":[{"id":100979,"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/posts\/100977\/revisions\/100979"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/media\/100978"}],"wp:attachment":[{"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/media?parent=100977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/categories?post=100977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news.talkwithrattan.com\/index.php\/wp-json\/wp\/v2\/tags?post=100977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}