Major network outage Worldwide

[frase]

Computer security company CrowdStrike is linked to a major IT outage affecting banks, airports, supermarkets and businesses across Australia and the world.

Airport check-in systems across the globe have been disrupted and businesses have reported the "blue screen of death" and IT outages.

• Reports of the outage in Australia began flooding in about 3pm AEST
• Outages have hit banks and payment systems, forcing some supermarkets and petrol stations to close
• Airport check-in systems have been disrupted and businesses have reported the "blue screen of death" and IT outages
• So far, triple-0 services and core emergency services say they are able to work
• At this stage, Australian authorities believe the outage is linked to the cyber security firm CrowdStrike and is not the result of a cyber attack
• A major cyber security company says CrowdStrike has put out a fix to try to address the issue.

I briefly saw an image on the news and was a BSOD with non_page_fault error!
It is like a scene from 28 Days lol..Airports in chaos, supermarket chains banks etc..

Network Outage Sweeps Businesses across Australia

A massive network outage caused by a third-party security sensor running on Microsoft cloud services has disrupted numerous institutions across

www.miragenews.com

 

[wavey]

Kaspersky are saying if BSOD, get to safemode and remove the driver (csagent.sys or C-00000291*.sys)

 

[frase]

Yup..

CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes.

Workaround Steps:

1. Boot Windows into Safe Mode or the Windows Recovery Environment
2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
3. Locate the file matching “C-00000291*.sys”, and delete it.
4. Boot the host normally.

 

[HCHTech]

Not in our stack, but bracing for the phone calls where we get to say, "yeah, nothing we can do about that".