July 22nd, 2024

Microsoft says EU to blame for the worst IT outage

Microsoft attributes a major IT outage affecting 8.5 million Windows devices to a faulty security update from Crowdstrike, citing EU restrictions on security changes. The incident disrupted flights, NHS services, and payments. CrowdStrike acknowledged the glitch, while Europe seeks more digital market access.

Read original articleLink Icon
Microsoft says EU to blame for the worst IT outage

Microsoft blames the European Union for a massive IT outage affecting up to 8.5 million Windows devices due to a faulty security update from Crowdstrike. The EU's 2009 agreement restricted Microsoft from making security changes that could have prevented the update, leading to widespread computer failures. Thousands of flights were disrupted, the UK's NHS service was impacted, and contactless payments failed. The issue stemmed from a defective update for CrowdStrike's Falcon system, which has privileged access to a computer's kernel. Microsoft's in-house alternative, Windows Defender, was limited by the EU agreement, unlike Apple, which blocked kernel access on Mac computers for security reasons. CrowdStrike has acknowledged the software glitch and apologized for the chaos caused. Europe is currently pushing for more access in digital markets, exemplified by efforts to compel Apple to allow alternative app stores and web browsers on iPhones. Microsoft confirmed the impact on less than 1% of Windows devices but noted significant repercussions due to CrowdStrike's widespread business use.

Related

Microsoft/Crowdstrike outage ground planes, banks and the London Stock Exchange

Microsoft/Crowdstrike outage ground planes, banks and the London Stock Exchange

A cybersecurity program update failure caused global disruptions affecting businesses and services like United Airlines, McDonald’s, and the London Stock Exchange. Microsoft and CrowdStrike faced issues, but the problem was resolved without a cyberattack. CrowdStrike's shares dropped 20%, and Microsoft's fell 2.9%. The incident, involving Windows and security software, is one of the largest IT outages, surpassing past disruptions.

Microsoft says 8.5M Windows devices were affected by CrowdStrike outage

Microsoft says 8.5M Windows devices were affected by CrowdStrike outage

Microsoft reported that a CrowdStrike outage impacted 8.5 million Windows devices globally, causing disruptions in banking, retail, and transportation. Collaboration with tech giants is ongoing to address cybersecurity risks efficiently.

Microsoft points finger at the EU for not being able to lock down Windows

Microsoft points finger at the EU for not being able to lock down Windows

Microsoft blames the EU for hindering Windows security due to an agreement allowing security software access. Recent disruptions affected 8.5 million PCs. EU restrictions differ for tech giants like Apple and Google.

Microsoft blames EU rules for allowing biggest IT outage to happen

Microsoft blames EU rules for allowing biggest IT outage to happen

Microsoft attributes the world's largest IT outage to EU regulations hindering security changes, causing disruptions in travel and healthcare. CrowdStrike update affected 8.5 million Windows devices, emphasizing tech companies' struggle with security and regulations.

Microsoft Blames European Commission for Major Worldwide Outage

Microsoft Blames European Commission for Major Worldwide Outage

A global PC outage caused by a CrowdStrike Falcon antivirus update affected Windows systems, leading to disruptions in various sectors. Mac and Linux remained unaffected due to different security protocols. Microsoft and CrowdStrike addressed the issue, emphasizing the importance of security measures.

Link Icon 3 comments
By @randunel - 4 months
> Microsoft has Windows Defender, its in-house alternative to CrowdStrike, but because of the 2009 agreement made to avoid a European competition investigation, had allowed multiple security providers to install software at the kernel level.

> The document states that Microsoft is obligated to make available its APIs in its Windows Client and Server operating systems that are used by its security products to third-party security software makers. The document says that Microsoft has to also document the APIs on the Microsoft Developer Network except where they create security risks.

By @gnabgib - 4 months
Discussion (58 points, 20 hours ago, 74 comments) https://news.ycombinator.com/item?id=41029590