Cyber outage hits flights, banks globally

A software update wreaked havoc on computer systems globally on Friday, grounding flights, forcing some broadcasters off air and hitting services from banking to healthcare.

An update to a product offered by global cybersecurity firm Crowd-Strike appeared to be the trigger, affecting customers using Microsoft's Windows Operating System. Microsoft said later on Friday the issue had been fixed.

CrowdStrike CEO George Kurtz said on social media platform X that the company was "actively working with customers impacted by a defect found in a single content update for Windows hosts" and that a fix was being deployed.

"This is not a security incident or cyberattack," Kurtz said in the post.

Early on Friday, major US airlines — American Airlines, Delta Air Lines and United Airlines — grounded flights, while other carriers and airports around the world reported delays and disruptions.

Banks and financial service companies from Australia to India and Germany warned customers of disruptions and traders across markets spoke of issues with executing transactions.

In Britain, booking systems used by doctors were offline, multiple reports posted on X by medical officials said, while Sky News, one of the country's major news broadcasters, was off air, apologizing for being unable to transmit live, and soccer club Manchester United said on X that it had to postpone a scheduled release of tickets.

Microsoft's cloud unit Azure said it was aware of the issue that impacted virtual machines running Windows OS and the CrowdStrike Falcon agent getting stuck in a "restarting state".

In an alert to clients issued on Friday, CrowdStrike said its "Falcon Sensor" software was causing Microsoft Windows to crash and display a blue screen, known informally as the "Blue Screen of Death". It also shared a manual workaround to rectify the issue.

"This is a very, very uncomfortable illustration of the fragility of the world's core internet infrastructure," Ciaran Martin, professor at the University of Oxford's Blavatnik School of Government and former head of the UK National Cyber Security Centre, said.

The outages rippled far and wide.

Airports in Singapore and India said the outage meant some airlines were having to check in passengers manually. Amsterdam's Schiphol Airport, one of Europe's busiest, said it was affected, while airline Iberia said it had been operating manually at airports until its electronic check-in counters and online check-ins were reactivated.

"IT security tools are all designed to ensure that companies can continue to operate in the worst-case scenario of a data breach, so to be the root cause of a global IT outage is an unmitigated disaster," Ajay Unni, CEO of StickmanCyber, one of Australia's largest cybersecurity services companies, said.

Agencies via Xinhua