What can be learned from Austin-based CrowdStrike's outage? Photo via Getty Images

Airlines, banks, hospitals and other risk-averse organizations around the world chose cybersecurity company CrowdStrike to protect their computer systems from hackers and data breaches.

But all it took was one faulty CrowdStrike software update to cause global disruptions Friday that grounded flights, knocked banks and media outlets offline, and disrupted hospitals, retailers and other services.

“This is a function of the very homogenous technology that goes into the backbone of all of our IT infrastructure,” said Gregory Falco, an assistant professor of engineering at Cornell University. “What really causes this mess is that we rely on very few companies, and everybody uses the same folks, so everyone goes down at the same time.”

The trouble with the update issued by CrowdStrike and affecting computers running Microsoft's Windows operating system was not a hacking incident or cyberattack, according to CrowdStrike, which apologized and said a fix was on the way.

But it wasn't an easy fix. It required “boots on the ground” to remediate, said Gartner analyst Eric Grenier.

“The fix is working, it’s just a very manual process and there’s no magic key to unlock it,” Grenier said. “I think that is probably what companies are struggling with the most here.”

While not everyone is a client of CrowdStrike and its platform known as Falcon, it is one of the leading cybersecurity providers, particularly in transportation, healthcare, banking and other sectors that have a lot at stake in keeping their computer systems working.

“They’re usually risk-averse organizations that don’t want something that’s crazy innovative, but that can work and also cover their butts when something goes wrong. That’s what CrowdStrike is,” Falco said. “And they’re looking around at their colleagues in other sectors and saying, ‘Oh, you know, this company also uses that, so I’m gonna need them, too.’”

Worrying about the fragility of a globally connected technology ecosystem is nothing new. It's what drove fears in the 1990s of a technical glitch that could cause chaos at the turn of the millennium.

“This is basically what we were all worried about with Y2K, except it’s actually happened this time,” wrote Australian cybersecurity consultant Troy Hunt on the social platform X.

Across the world Friday, affected computers were showing the “blue screen of death” — a sign that something went wrong with Microsoft's Windows operating system.

But what's different now is “that these companies are even more entrenched,” Falco said. "We like to think that we have a lot of players available. But at the end of the day, the biggest companies use all the same stuff.”

Founded in 2011 and publicly traded since 2019, CrowdStrike describes itself in its annual report to financial regulators as having “reinvented cybersecurity for the cloud era and transformed the way cybersecurity is delivered and experienced by customers.” It emphasizes its use of artificial intelligence in helping to keep pace with adversaries. It reported having 29,000 subscribing customers at the start of the year.

The Austin, Texas-based firm is one of the more visible cybersecurity companies in the world and spends heavily on marketing, including Super Bowl ads. At cybersecurity conferences, it's known for large booths displaying massive action-figure statues representing different state-sponsored hacking groups that CrowdStrike technology promises to defend against.

CrowdStrike CEO George Kurtz is among the most highly compensated in the world, recording more than $230 million in total compensation in the last three years. Kurtz is also a driver for a CrowdStrike-sponsored car racing team.

After his initial statement about the problem was criticized for lack of contrition, Kurtz apologized in a later social media post Friday and on NBC's “Today Show.”

“We understand the gravity of the situation and are deeply sorry for the inconvenience and disruption,” he said on X.

Richard Stiennon, a cybersecurity industry analyst, said this was a historic mistake by CrowdStrike.

“This is easily the worst faux pas, technical faux pas or glitch of any security software provider ever,” said Stiennon, who has tracked the cybersecurity industry for 24 years.

While the problem is an easy technical fix, he said, it’s impact could be long-lasting for some organizations because of the hands-on work needed to fix each affected computer. “It’s really, really difficult to touch millions of machines. And people are on vacation right now, so, you know, the CEO will be coming back from his trip to the Bahamas in a couple of weeks and he won’t be able to use his computers.”

Stiennon said he did not think the outage revealed a bigger problem with the cybersecurity industry or CrowdStrike as a company.

“The markets are going to forgive them, the customers are going to forgive them, and this will blow over,” he said.

Forrester analyst Allie Mellen credited CrowdStrike for clearly telling customers what they need to do to fix the problem. But to restore trust, she said there will need to be a deeper look at what occurred and what changes can be made to prevent it from happening again.

“A lot of this is likely to come down to the testing and software development process and the work that they’ve put into testing these kinds of updates before deployment,” Mellen said. “But until we see the complete retrospective, we won’t know for sure what the failure was.”

Ad Placement 300x100
Ad Placement 300x600

CultureMap Emails are Awesome

Houston space companies win NASA funding to build Mars exploration robots

mission to mars

Two Houston-area spacetech companies have landed a portion of a $17 million award from NASA to develop robots for exploring the surface of Mars, the agency announced this month.

Houston-based Inuitive Machines and Webster, Texas-based MEI Technologies, which does business as Aegis Aerospace, were among the seven companies selected to receive the funding from NASA's Science Transport and Robotic Innovation for Deployment and Exploration (STRIDE) initiative.

According to the release from NASA, the companies are tasked with creating "innovative mobility systems" that would allow future Mars missions to access more challenging terrain and difficult-to-reach regions of the planet, and to travel farther distances. NASA estimated that the work will begin this fall.

NASA solicited proposals for participants in the STRIDE initiative in January. The seven named companies are the first selected to participate in the program.

The additional five companies to receive STRIDE funding include:

"STRIDE demonstrates NASA’s commitment to strong public-private partnerships, allowing the agency to explore new approaches for Mars surface exploration while identifying key capability gaps and development needs for commercial systems that could operate and traverse realistic Martian environments," NASA shared in the announcement.

Last month, Intuitive Machines was awarded $148.3 million to deliver its Nova-C lander to the moon. The funding was part of $600 million the space agency awarded to three companies as part of its Moon Base Program and was Intuitive Machines' sixth task order under NASA's Commercial Lunar Payload Services (CLPS) program. Astrobotic was also one of the companies to land funding for the Moon Base program, as well as Austin-based Firefly Aerospace.

Around the same time, Firefly Aerospace was awarded a $13 million subcontract from NASA’s Jet Propulsion Laboratory to develop technology for NASA’s SkyFall mission to Mars. The mission aims to deploy three Mars helicopters to "perform science and demonstrate airborne subsurface mapping and resource prospecting on the planet." Read more here.

University of Houston debuts UH Health, expanding collaborative health care and research efforts

health care hub

The University of Houston has announced its cross-disciplinary academic venture, UH Health.

It will align UH’s efforts in education, research and clinical partnerships to create new opportunities to advance research and innovation, community impact, and education, according to a news release.

“From opening the state’s first college of optometry to developing groundbreaking vaccines, improving the health of all Texans has been a UH priority for decades,” UH President Renu Khator said in the release. “Now, with the launch of UH Health, we are bringing together the full strength of our health enterprise to expand our reach, advance research and transform the future of health for our communities.”

UH is adopting a fully collaborative model, with health professionals from various concentrations to help better understand overall patient care, which includes factors like clinical, behavioral and social factors that can influence health outcomes.

UH Health will also have partnerships with HCA Healthcare, Memorial Hermann Hospital, Baylor College of Medicine, MD Anderson Cancer Center and other Texas Medical Center facilities. In addition, UH Health will work with DHR Health in the Rio Grande Valley to create new opportunities for health care education, workforce development and research in one of Texas' medically underserved regions.

As part of UH Health, UH Health Family Care Center will provide integrated primary care and mental health services to the University and its surrounding communities at affordable prices to serve the Third Ward, East End and South Houston. The Household-Centered Care program will give students opportunities to work directly with community caregivers through patient home visits, while the 3rd Ward Place of Wellness offers health screenings, preventive services, education and other resources designed to support long-term health and well-being, according to UH. The College of Optometry will continue to see children and families via outreach programs and clinics across the community.

UH Health also aims to address shortages in health care professionals, providing a pipeline from the university to the workforce. According to the Texas Hospital Association, 64 percent of hospitals in the state are operating with reduced services and fewer beds due to staff shortages.

“Preparing the next generation of health care leaders is one of the most important investments we can make in the future of our state,” Jonathan McCullers, vice president for health affairs at UH and dean of the Tilman J. Fertitta Family College of Medicine at UH, added in the release. “UH Health is ensuring our graduates are equipped to work effectively in today’s complex healthcare environment.”

Additionally, UH shared it is investing $77 million into a 55,000-square-foot medical research facility aimed at boosting interdisciplinary research and scientific discovery.

“Healthcare is no longer delivered in isolation, and complex health challenges require coordinated solutions,” McCullers added. “UH Health allows us to work across disciplines to tackle health challenges, advance research and improve outcomes for patients and our community.”