CrowdStrike CEO Denies Cyberattack, Cites Software Glitch

In the wake of a significant global outage affecting Microsoft users on Friday, CrowdStrike’s CEO has dismissed rumors suggesting a cyberattack was to blame, attributing the disruption to a software update error. CrowdStrike, a prominent cybersecurity firm, provides its Falcon security software for Microsoft Windows systems. The recent outages are linked to a problematic software update, which has led to widespread issues for users.

Microsoft has confirmed that the root cause of the outage has been addressed, though some residual disruptions are expected to affect Microsoft 365 apps and services in the short term. Amidst the chaos, several posts on X (formerly Twitter) have speculated that a cyberattack might be responsible for the outage. However, CrowdStrike’s CEO, George Kuntz, has strongly refuted these claims. According to Kuntz, the outage is not connected to any security incident or cyberattack, but rather is due to a glitch in a content update for Windows computers.

Kuntz assured that CrowdStrike is “actively working” with affected customers to resolve the issue. He noted that the problem has been “identified, isolated, and a fix has been deployed.” The outage has had a far-reaching impact, affecting various critical sectors. Emergency services in multiple U.S. states are experiencing disruptions, the London Stock Exchange group has been unable to publish financial reports, Australian banks are facing operational issues, and over 1,100 U.S. flights have been canceled with another 2,200 delayed. Moreover, numerous airports globally are also grappling with delays and cancellations.

CrowdStrike is a leading global cybersecurity firm known for its Falcon platform and its role in major cybersecurity investigations. Established in 2011 and headquartered in Austin, the company serves over 20,000 clients, including many Fortune 500 companies, across more than 100 countries. One of CrowdStrike’s most notable contributions was its involvement in investigating the 2016 Russian hack of the Democratic National Committee (DNC) during the presidential election. The company was erroneously linked to a controversy involving former President Donald Trump, who mentioned CrowdStrike during a call with Ukrainian President Volodymyr Zelensky in 2016—a conversation that led to Trump’s first impeachment.

CrowdStrike Falcon is the company’s flagship cybersecurity platform. It offers a range of security features designed to “prevent the execution of malicious code, block zero-day exploits, terminate processes, and contain command and control callbacks,” according to the company’s website. Falcon is utilized across various industries, including healthcare, entertainment, retail, IT, banking, and transportation. The platform provides comprehensive protection in areas such as cloud security, identity protection, threat intelligence, endpoint security, and IT security. Falcon is designed to replace traditional security services like antivirus programs, endpoint detection tools, and managed detection and response solutions.

Although CrowdStrike has announced that a fix has been deployed, the recovery process might take some time. Brian Honan, founder of Ireland’s Computer Emergency Response Team, highlighted that the fixes require “manual intervention on each individually impacted device,” which could result in a prolonged recovery period for affected organizations. As the situation continues to develop, companies are advised to stay in close contact with CrowdStrike for updates and further instructions on implementing the necessary fixes.