What can be learned from Austin-based CrowdStrike's outage? Photo via Getty Images

Airlines, banks, hospitals and other risk-averse organizations around the world chose cybersecurity company CrowdStrike to protect their computer systems from hackers and data breaches.

But all it took was one faulty CrowdStrike software update to cause global disruptions Friday that grounded flights, knocked banks and media outlets offline, and disrupted hospitals, retailers and other services.

“This is a function of the very homogenous technology that goes into the backbone of all of our IT infrastructure,” said Gregory Falco, an assistant professor of engineering at Cornell University. “What really causes this mess is that we rely on very few companies, and everybody uses the same folks, so everyone goes down at the same time.”

The trouble with the update issued by CrowdStrike and affecting computers running Microsoft's Windows operating system was not a hacking incident or cyberattack, according to CrowdStrike, which apologized and said a fix was on the way.

But it wasn't an easy fix. It required “boots on the ground” to remediate, said Gartner analyst Eric Grenier.

“The fix is working, it’s just a very manual process and there’s no magic key to unlock it,” Grenier said. “I think that is probably what companies are struggling with the most here.”

While not everyone is a client of CrowdStrike and its platform known as Falcon, it is one of the leading cybersecurity providers, particularly in transportation, healthcare, banking and other sectors that have a lot at stake in keeping their computer systems working.

“They’re usually risk-averse organizations that don’t want something that’s crazy innovative, but that can work and also cover their butts when something goes wrong. That’s what CrowdStrike is,” Falco said. “And they’re looking around at their colleagues in other sectors and saying, ‘Oh, you know, this company also uses that, so I’m gonna need them, too.’”

Worrying about the fragility of a globally connected technology ecosystem is nothing new. It's what drove fears in the 1990s of a technical glitch that could cause chaos at the turn of the millennium.

“This is basically what we were all worried about with Y2K, except it’s actually happened this time,” wrote Australian cybersecurity consultant Troy Hunt on the social platform X.

Across the world Friday, affected computers were showing the “blue screen of death” — a sign that something went wrong with Microsoft's Windows operating system.

But what's different now is “that these companies are even more entrenched,” Falco said. "We like to think that we have a lot of players available. But at the end of the day, the biggest companies use all the same stuff.”

Founded in 2011 and publicly traded since 2019, CrowdStrike describes itself in its annual report to financial regulators as having “reinvented cybersecurity for the cloud era and transformed the way cybersecurity is delivered and experienced by customers.” It emphasizes its use of artificial intelligence in helping to keep pace with adversaries. It reported having 29,000 subscribing customers at the start of the year.

The Austin, Texas-based firm is one of the more visible cybersecurity companies in the world and spends heavily on marketing, including Super Bowl ads. At cybersecurity conferences, it's known for large booths displaying massive action-figure statues representing different state-sponsored hacking groups that CrowdStrike technology promises to defend against.

CrowdStrike CEO George Kurtz is among the most highly compensated in the world, recording more than $230 million in total compensation in the last three years. Kurtz is also a driver for a CrowdStrike-sponsored car racing team.

After his initial statement about the problem was criticized for lack of contrition, Kurtz apologized in a later social media post Friday and on NBC's “Today Show.”

“We understand the gravity of the situation and are deeply sorry for the inconvenience and disruption,” he said on X.

Richard Stiennon, a cybersecurity industry analyst, said this was a historic mistake by CrowdStrike.

“This is easily the worst faux pas, technical faux pas or glitch of any security software provider ever,” said Stiennon, who has tracked the cybersecurity industry for 24 years.

While the problem is an easy technical fix, he said, it’s impact could be long-lasting for some organizations because of the hands-on work needed to fix each affected computer. “It’s really, really difficult to touch millions of machines. And people are on vacation right now, so, you know, the CEO will be coming back from his trip to the Bahamas in a couple of weeks and he won’t be able to use his computers.”

Stiennon said he did not think the outage revealed a bigger problem with the cybersecurity industry or CrowdStrike as a company.

“The markets are going to forgive them, the customers are going to forgive them, and this will blow over,” he said.

Forrester analyst Allie Mellen credited CrowdStrike for clearly telling customers what they need to do to fix the problem. But to restore trust, she said there will need to be a deeper look at what occurred and what changes can be made to prevent it from happening again.

“A lot of this is likely to come down to the testing and software development process and the work that they’ve put into testing these kinds of updates before deployment,” Mellen said. “But until we see the complete retrospective, we won’t know for sure what the failure was.”

Ad Placement 300x100
Ad Placement 300x600

CultureMap Emails are Awesome

Houston hospital names leading cancer scientist as new academic head

new hire

Houston Methodist Academic Institute has named cancer clinician and scientist Dr. Jenny Chang as its new executive vice president, president, CEO, and chief academic officer.

Chang was selected following a national search and will succeed Dr. H. Dirk Sostman, who will retire in February after 20 years of leadership. Chang is the director of the Houston Methodist Dr. Mary and Ron Neal Cancer Center and the Emily Herrmann Presidential Distinguished Chair in Cancer Research. She has been with Houston Methodist for 15 years.

Over the last five years, Chang has served as the institute’s chief clinical science officer and is credited with strengthening cancer clinical trials. Her work has focused on therapy-resistant cancer stem cells and their treatment, particularly relating to breast cancer.

Her work has generated more than $35 million in funding for Houston Methodist from organizations like the National Institutes of Health and the National Cancer Institute, according to the health care system. In 2021, Dr. Mary Neal and her husband Ron Neal, whom the cancer center is now named after, donated $25 million to support her and her team’s research on advanced cancer therapy.

In her new role, Chang will work to expand clinical and translational research and education across Houston Methodist in digital health, robotics and bioengineered therapeutics.

“Dr. Chang’s dedication to Houston Methodist is unparalleled,” Dr. Marc L. Boom, Houston Methodist president and CEO, said in a news release. “She is committed to our mission and to helping our patients, and her clinical expertise, research innovation and health care leadership make her the ideal choice for leading our academic mission into an exciting new chapter.”

Chang is a member of the American Association of Cancer Research (AACR) Stand Up to Cancer Scientific Advisory Council. She earned her medical degree from Cambridge University in England and completed fellowship training in medical oncology at the Royal Marsden Hospital/Institute for Cancer Research. She earned her research doctorate from the University of London.

She is also a professor at Weill Cornell Medical School, which is affiliated with the Houston Methodist Academic Institute.

Texas A&M awarded $1.3M federal grant to develop clean energy tech from electronic waste

seeing green

Texas A&M University in College Station has received a nearly $1.3 million federal grant for development of clean energy technology.

The university will use the $1,280,553 grant from the U.S. Department of Energy to develop a cost-effective, sustainable method for extracting rare earth elements from electronic waste.

Rare earth elements (REEs) are a set of 17 metallic elements.

“REEs are essential components of more than 200 products, especially high-tech consumer products, such as cellular telephones, computer hard drives, electric and hybrid vehicles, and flat-screen monitors and televisions,” according to the Eos news website.

REEs also are found in defense equipment and technology such as electronic displays, guidance systems, lasers, and radar and sonar systems, says Eos.

The grant awarded to Texas A&M was among $17 million in DOE grants given to 14 projects that seek to accelerate innovation in the critical materials sector. The federal Energy Act of 2020 defines a critical material — such as aluminum, cobalt, copper, lithium, magnesium, nickel, and platinum — as a substance that faces a high risk of supply chain disruption and “serves an essential function” in the energy sector.

“DOE is helping reduce the nation’s dependence on foreign supply chains through innovative solutions that will tap domestic sources of the critical materials needed for next-generation technologies,” says U.S. Energy Secretary Jennifer Granholm. “These investments — part of our industrial strategy — will keep America’s growing manufacturing industry competitive while delivering economic benefits to communities nationwide.”

------

This article originally appeared on EnergyCapital.

Biosciences startup becomes Texas' first decacorn after latest funding

A Dallas-based biosciences startup whose backers include millionaire investors from Austin and Dallas has reached decacorn status — a valuation of at least $10 billion — after hauling in a series C funding round of $200 million, the company announced this month. Colossal Biosciences is reportedly the first Texas startup to rise to the decacorn level.

Colossal, which specializes in genetic engineering technology designed to bring back or protect various species, received the $200 million from TWG Global, an investment conglomerate led by billionaire investors Mark Walter and Thomas Tull. Walter is part owner of Major League Baseball’s Los Angeles Dodgers, and Tull is part owner of the NFL’s Pittsburgh Steelers.

Among the projects Colossal is tackling is the resurrection of three extinct animals — the dodo bird, Tasmanian tiger and woolly mammoth — through the use of DNA and genomics.

The latest round of funding values Colossal at $10.2 billion. Since launching in 2021, the startup has raised $435 million in venture capital.

In addition to Walter and Tull, Colossal’s investors include prominent video game developer Richard Garriott of Austin and private equity veteran Victor Vescov of Dallas. The two millionaires are known for their exploits as undersea explorers and tourist astronauts.

Aside from Colossal’s ties to Dallas and Austin, the startup has a Houston connection.

The company teamed up with Baylor College of Medicine researcher Paul Ling to develop a vaccine for elephant endotheliotropic herpesvirus (EEHV), the deadliest disease among young elephants. In partnership with the Houston Zoo, Ling’s lab at the Baylor College of Medicine has set up a research program that focuses on diagnosing and treating EEHV, and on coming up with a vaccine to protect elephants against the disease. Ling and the BCMe are members of the North American EEHV Advisory Group.

Colossal operates research labs Dallas, Boston and Melbourne, Australia.

“Colossal is the leading company working at the intersection of AI, computational biology, and genetic engineering for both de-extinction and species preservation,” Walter, CEO of TWG Globa, said in a news release. “Colossal has assembled a world-class team that has already driven, in a short period of time, significant technology innovations and impact in advancing conservation, which is a core value of TWG Global.”

Well-known genetics researcher George Church, co-founder of Colossal, calls the startup “a revolutionary genetics company making science fiction into science fact.”

“We are creating the technology to build de-extinction science and scale conservation biology,” he added, “particularly for endangered and at-risk species.”