Global IT Outage from CrowdStrike Update Disrupts Major Airlines and Banks

Apps & Games / Desktop / Windows / Global IT Outage from CrowdStrike Update Disrupts Major Airlines and Banks
27 Jul 2024

A recent global IT outage has highlighted the vulnerabilities of modern computing systems, particularly following a problematic update from CrowdStrike that led millions of Windows computers to experience the notorious Blue Screen of Death (BSoD) errors. This incident had a ripple effect across various sectors, impacting airlines, hospitals, banks, and numerous businesses worldwide. Among the airlines affected, United, Delta, and American Airlines faced significant disruptions, resulting in thousands of canceled flights. In stark contrast, Southwest Airlines managed to maintain its operations without similar setbacks.

Southwest’s Unexpected Resilience

Interestingly, Southwest’s resilience during this crisis was not attributed to a shift to Linux or a particularly robust cybersecurity strategy. Instead, the airline’s continued reliance on the antiquated Windows 3.1 operating system, which has not received updates since Microsoft ceased support in 2001, played a crucial role. This legacy system, launched in 1992, remained impervious to the problematic CrowdStrike update, allowing Southwest to operate largely unaffected.

Windows 95 Similarly Unaffected

As reported by Tom’s Hardware, while other airlines grappled with operational challenges due to their dependence on more contemporary computing technologies, Southwest’s outdated systems provided an unexpected safeguard against the widespread failures. The irony of this situation is not lost on observers; the very technology that often draws criticism for being outdated has, in this instance, insulated the airline from the turmoil faced by its competitors.

However, it is important to note that Southwest’s operations were not entirely shielded from the fallout. While the airline’s systems remained functional, disruptions at other airports indirectly affected its operations. Additionally, Southwest does not rely solely on Windows 3.1; the airline also utilizes Windows 95 for staff scheduling, another operating system that escaped the ill-fated CrowdStrike update.

The Future of Legacy Systems

While the use of outdated software has proven advantageous in this particular scenario, it raises questions about the long-term viability of such systems. As technology continues to advance, Southwest will inevitably need to modernize its operating infrastructure to ensure compatibility with newer systems. One user on X even suggested that the airline consider transitioning to Windows XP, which, despite no longer receiving updates, is a more recent option that can run Windows 3.1 software in compatibility mode.

What is CrowdStrike Falcon used for?

CrowdStrike Falcon is a cloud-based endpoint protection platform that uses artificial intelligence (AI) to provide next-generation antivirus, endpoint detection and response (EDR), and managed threat hunting capabilities. It is utilized to protect servers, laptops, desktops, and mobile devices against various cyber threats, including malware, ransomware, and advanced persistent threats (APTs). The platform is designed to offer real-time protection, detect breaches, and facilitate quick response to security incidents.

How to disable CrowdStrike Falcon sensor temporarily?

To temporarily disable the CrowdStrike Falcon sensor, you will need to use admin privileges. Go to the Control Panel and find the CrowdStrike Falcon Sensor in the list of installed programs. Right-click on it and choose "Uninstall". Rather than fully uninstalling, this can be used to temporarily disable the sensor. Otherwise, you can use the command line to stop the service by executing: `sc stop csagent`. Note that disabling the sensor reduces the security posture of the device, so it should be done with caution.
Update: 27 Jul 2024