I heard that CloudStrike is something that runs on Windows servers, and an error with it caused a bunch of Win Servers to crash. What's the impact of the issue too?
I'm not a tech person, tho I do use Linux desktop, btw ๐
For context, I do not work in anything remotely close to an IT department. I work in a hospital. This affected my work the other day too. I am a bit more tech savvy than some of my coworkers, so I was attempting to see if I could fix the issue on my own by reverting to the previous windows update in recovery mode.
However, doing so prompted me for a Windows product key, which I obviously didn't have because I didn't install Windows on that computer.
The IT department had to come around individually for every single affected computer. They had to manually look up and type out the unique Windows product key for every single affected computer in order to be able to fix the problem.
Not sure if most installs of Windows act that way or not, but it definitely made the process more manual and annoying than it had to be. I have no idea why many of the recovery options required me to look up and enter a Windows product key. Seemed very odd to me and just made the ordeal more manual and time consuming than it had to be.
I believe some hospitals even ended up having to cancel surgeries.
I was wondering why this didn't happen to me, and I guess it's because my company uses Carbon Black which seems to be a competitor to CrowdStrike. Phew!
To add to these guys, what it looked like in hospitals was all computers going blue screen of death on a loop. You would reboot and it would get to the desktop and go BSOD again. Communications with windows servers also went down.
The problem is, the safety plans are contingent on having windows working. Thereโs little to no contingent on no windows, people just expect it to always be there.
I and my team and all the individuals we ended up responsible for were fine by morning, but it was not a safe time.
911 was affected. Ambulance dispatch was affected. Many medical based institutions rely on windows and these security systems as well as airlines and such.
That said, please check on grandma, your favorite old uncle, single parent living solo, and all the rest today. There is no telling how many people are dead or injured in homes right now who couldnโt get through to emergency services last night. Maybe still canโt today.
Crowd strike is an antivirus program that is installed on servers and laptops/desktops. The update corrupted a file that caused the operating system not to boot. The impact is thousands of hours of manual labor to recover these servers and endpoints. You have to do it in person unless your user is tech savvy enough to get into safe mode and delete a file. And you need admin rights
Big time AV software used by a lot of conpanies issued an update that crashed all windows machines it was installed on. The only way to fix it is to boot into safe mode and then delete a file. On millions upon millions of servers and pcs. One by one.
I don't know the details, but skimming past headlines, looks like it was blue screen boot loop. So it must have involved a low level key like UEFI Secure Boot package or shim... I think.