Microsoft Global Outage Resolved Following Faulty Update by CrowdStrike

A faulty update from cybersecurity firm CrowdStrike led to a significant global outage for Microsoft Windows-based desktops and laptops on Friday.

The faulty update specifically affected CrowdStrike’s Falcon Sensor software, which is designed to safeguard computer systems from cyber-attacks. This malfunction caused PCs running Windows to crash and display the infamous Blue Screen of Death (BSOD) error message. As a result, users around the globe found themselves stuck in a recovery loop and unable to reboot their systems.

The widespread outage impacted a variety of sectors, including banks, airlines, hospitals, media companies, IT institutes, TV broadcasters, and supermarkets. CrowdStrike acknowledged the issue and identified the problematic update affecting its Falcon Sensor product.

The firm has since rolled back the changes and released fixes to address the crashes. Nevertheless, some Windows hosts continue to encounter the BSOD error message related to the Falcon Sensor, leading to unexpected computer shutdowns or restarts.

[twitter-embed-display twitter_url=’https://twitter.com/George_Kurtz/status/1814235001745027317′]

George Kurtz, President and CEO of CrowdStrike, clarified on X (formerly Twitter) that the issue is not a security incident or cyberattack. “CrowdStrike is actively working with customers impacted by a defect found in a single content update for Windows hosts. Mac and Linux hosts are not impacted. This is not a security incident or cyberattack. The issue has been identified, isolated and a fix has been deployed,” Kurtz stated. He further emphasized that communications should be conducted through official channels and assured that their team is fully mobilized to ensure the security and stability of CrowdStrike customers.

In the interim, CrowdStrike provided a workaround for affected Windows users to resolve the issue. Users are advised to boot Windows into Safe Mode or the Windows Recovery Environment, navigate to the C:\Windows\System32\drivers\CrowdStrike directory, locate the file matching “C-00000291*.sys” and delete it, before booting the host normally.

Microsoft also acknowledged the issue, indicating that it was aware of the problem caused by a recent update to CrowdStrike Falcon Sensor software. A spokesperson for Microsoft stated, “We anticipate a resolution is forthcoming. We’re aware of an issue affecting Windows devices due to an update from a third-party software platform.”

CrowdStrike’s rapid response and ongoing communication have been pivotal in addressing the outage. Users are encouraged to follow the provided workaround and stay updated through official channels as the situation evolves.