software problems - Federal Office: Situation normalizing after IT issue
According to the BSI (Federal Office for Information Security), after worldwide IT disruptions caused by a faulty update for a security software, the situation in many areas is reportedly normalizing, as stated by the BSI. However, many companies are still dealing with the after-effects of the disruptions, as the BSI notes. The air traffic in Germany has reportedly normalized, according to the ADV (Airport Association).
Many business processes and workflows were disrupted due to the failure of computer systems or individual applications. The BSI warned that cybercriminals were exploiting the incidents for various forms of phishing, scams, or fake websites. An unofficial code was also circulating.
The BSI recommends obtaining technical information only from official sources of the Crowdstrike security software company. Regarding the IT disruptions caused by a disturbance of the Microsoft Azure service, the situation is reportedly normalizing, according to the BSI.
Microsoft: Approximately 8.5 million Windows devices affected
Approximately 8.5 million Windows devices were reportedly affected by the faulty software update that caused widespread disruptions worldwide. This represents fewer than one percent of all Windows computers, Microsoft stated on its corporate blog. The far-reaching economic and societal consequences demonstrate how many institutions, which operate numerous essential services, use the software provider Crowdstrike.
The IT incident caused enormous disruptions worldwide on Friday, nearly paralyzing air traffic in many places. Affected were also supermarkets, banks, hospitals, broadcasters, and other institutions. Crowdstrike attributed the cause to a faulty update of a software for Windows computers. The company announced the fix for the error on Friday afternoon, but the effects were still felt for some time.
Blog
The BSI in Berlin emphasized the importance of using reliable security software to prevent such incidents in the future. The faulty update was specific to Crowdstrike's software for Windows computers, highlighting the potential risks associated with relying on a single software provider. The international community has been urged to improve its collective cybersecurity measures, as demonstrated by the far-reaching impacts of this incident. Microsoft, based in the United States, has been actively working to address the issue, providing updates and guidance to affected users worldwide. The Federal Office for Information Security in Germany has been coordinating efforts with international partners to mitigate the fallout and ensure the safe resumption of services, especially in air traffic and critical infrastructure.