As the world recovers from widespread business and travel disruptions caused by a faulty software update from the cybersecurity firm CrowdStrike, malicious actors are trying to exploit the situation. Government cybersecurity agencies globally and CrowdStrike CEO George Kurtz have issued warnings about new phishing schemes. These schemes involve malicious actors posing as CrowdStrike employees or other tech specialists offering recovery assistance. “We know that adversaries and bad actors will try to exploit events like this,” Kurtz said. “I encourage everyone to remain vigilant and ensure that you’re engaging with official CrowdStrike representatives.” The UK Cyber Security Center has reported an increase in phishing attempts related to this event.
Impact on Airlines
Microsoft revealed that 8.5 million devices running its Windows operating system were affected by the faulty cybersecurity update, causing significant disruptions worldwide. This amounted to less than 1% of all Windows-based machines, noted by Microsoft cybersecurity executive David Weston. Airlines, with their complex and tightly scheduled operations, were among the hardest hit. By mid-afternoon Saturday on the U.S. East Coast, over 2,000 flights worldwide had been canceled, down from more than 5,100 cancellations on Friday. U.S. carriers accounted for about 1,600 of these cancellations, with airlines rushing to reposition planes and crews.
Robert Mann, a consultant and former airline executive, pointed out that the U.S. airlines’ disproportionate cancellations could be due to extensive technology outsourcing and higher exposure to Microsoft systems. Delta Air Lines canceled over 800 flights, followed by United Airlines with nearly 400 cancellations. Hartsfield–Jackson Atlanta International Airport faced significant disruptions, with many passengers spending the night there. European airlines experienced slower recovery, though operations at London’s Heathrow Airport and Berlin’s main airport began to stabilize.
Healthcare Systems and Patient Care
Healthcare systems also faced significant challenges, including clinic closures, canceled surgeries, and restricted access to patient records. Cedars-Sinai Medical Center in Los Angeles reported “steady progress” in bringing servers back online, actively working through the weekend to resolve remaining issues. In Austria, a senior doctors’ organization highlighted the need for analog backups to protect patient care, calling for high standards in patient data protection and security. The Schleswig-Holstein University Hospital in Germany also faced disruptions but planned to resume elective surgeries by Monday.
Technology and Governance
Oxford University management professor Ciaran Martin expressed surprise that the global disruption was caused by a software update from a respected cybersecurity company, questioning CrowdStrike’s quality control. He suggested that governments in the U.K. and the EU might be unable to prevent such incidents due to their reliance on American technology. Gartner analyst Eric Grenier doubted that new mandates would be proposed by governments, predicting that most affected devices would be fixed within a week. Grenier also warned businesses to avoid unauthorized assistance offers, emphasizing the risk of targeted phishing emails and calls.
