Understanding the CrowdStrike Outage: Causes, Solutions, and Prevention

The Outage

The CrowdStrike outage began early on July 19, 2024, and was caused by “a defect found in a single content update of its software on Microsoft Windows operating systems”, per a comment by CrowdStrike CEO George Kurtz on X.  The outage is only affecting windows devices that use CrowdStrike; and more specifically, those which use CrowdStrike’s Falcon technology. This defect led to a global tech outage, affecting various sectors including airlines, banks, and healthcare services.

The issue resulted in system crashes and the infamous ‘Blue Screen of Death’ for many users.

The Patch Fix

CrowdStrike quickly identified and isolated the issue, deploying a fix to rectify the defect.

For those affected, if a restart does not resolve the issue – the next step involves booting Windows in Safe Mode or the Windows Recovery Environment, navigating to the C:\Windows\System32\drivers\CrowdStrike directory, deleting the file named ‘C-00000291.sys’, and then rebooting the host normally.

Preventing Future Outages

To prevent future outages, CrowdStrike has provided guidance and reassurances. While specific preventative measures were not detailed in the search results, generally, it is crucial for organizations to:

• Ensure rigorous testing of updates in a controlled environment before widespread deployment.
• Maintain regular backups and a robust disaster recovery plan.
• Stay informed about updates and advisories from cybersecurity firms and software providers.
• Implement a layered security approach to mitigate the impact of any single point of failure.

The outage serves as a reminder of the interconnectedness of modern digital infrastructure and the cascading effects that can occur from a single point of failure. As we move forward, the lessons learned from this incident will undoubtedly contribute to more resilient IT systems.  Vendors need to proceed with abundant caution before publishing changes to production systems.

For more detailed information on the outage and the steps taken to resolve it, please refer to additional articles from news sources such as Forbes and NBC.

Fizen™

This post aims to provide a clear understanding of the CrowdStrike outage.  We also discussed its resolution, and the importance of proactive measures to prevent similar occurrences in the future. Organizations are encouraged to review their IT and security protocols regularly to ensure they are prepared for any such eventualities.

Interested in learning more about our team and how we can help with your technology needs?  Contact us today, and let’s reshape the future, together.