Friday 19 July 2024

Some N.B. flights cancelled by what cybersecurity expert calls worst tech disruption in 20 years

 
 
 
 

Some N.B. flights cancelled by what cybersecurity expert calls worst tech disruption in 20 years

Fredericton, Moncton airports seeing Porter cancellations from global tech outage

New Brunswick did not escape the effects of a global tech outage disrupting multiple industries Friday, including banks, health care and airlines.

While Horizon and Vitalité health networks did not face the brunt of the outage, Fredericton and Moncton airports are both experiencing issues with Porter Airlines flights.

According to an alert sent by global cybersecurity firm CrowdStrike to its clients and reviewed by Reuters, the company's Falcon Sensor software is causing Microsoft Windows to crash and display a blue screen, known informally as the "blue screen of death."

George Kurtz, CrowdStrike's CEO, took to X, formerly known as Twitter, to confirm that the company was working with customers "impacted by a defect found in a single content update for Windows hosts."

He wrote that it was not a security incident or cyberattack and that the issue was identified, isolated and a fix was deployed.

Porter Airlines cancelled its flights until 4  p.m. Atlantic time, which affects the Fredericton and Moncton airports, but not Saint John.

A woman smiles for a portrait Greater Moncton Roméo LeBlanc International Airport CEO Courtney Burns said passengers should expect delays or cancellations if flying with Porter Airlines. (Alexandre Silberman/CBC)

Courtney Burns, CEO of the Greater Moncton International Airport Authority, said on Friday mid-morning that its 7 a.m. flight to Ottawa had not departed, and that people should expect Porter flights to likely be delayed and possibly cancelled.

"Our best advice for passengers today is to check the status of their flight online, directly with their airline," she said. 

"When coming to the airport, they can anticipate it may take a bit longer than it typically would to get checked into their flight at an airline counter — that may impact more than just our Porter airline passengers."

Banks were also affected by the outage. National Bank said in a statement that it was aware of the issue, but "our online and mobile services, debit and credit cards and ATMs are fully functional."

UNI Financial also said it was not affected by the global situation, but it continues to monitor it.

A bank that says "UNI" on the front UNI Financial said it wasn't affected by the global outage. TD and CIBC referred CBC to the Canadian Banking Association, not confirming if they were affected. (Michel Nogue/Radio-Canada)

TD and CIBC referred CBC News to the Canadian Banking Association. A spokesperson said banks were reviewing the situation but that "Canadians can be reassured that our country has a well-protected banking system. Any current impact on banking services would be temporary." 

The spokesperson would not confirm what banks were affected.

'All at the mercy of one bad day'

David Shipley, a Fredericton-based cybersecurity expert and CEO of Beauceron Security, said the outage is the digital equivalent of "the airbag in your car that you have to protect you from bad things going off unexpectedly while you're driving."

He said CrowdStrike is a major anti-malware and anti-hacking tool used by some of the biggest organizations in the world, including Microsoft, and it essentially had a bad update.

"The irony shouldn't be lost on anyone, nor should the sobering fact that had this actually been malicious, it would be even worse than what we're experiencing right now," he said.

A man wearing a black turtleneck and jeans standing in room full of computers Cybersecurity expert David Shipley said it may take days for some organizations to fully recover from the outage. (Submitted by David Shipley)

Shipley said the outage is likely the biggest disruption seen globally in over 20 years.

He said while there is a solution for individual Windows PCs, because much information technology is remotely managed due to the pandemic and changing workforces, it may take days for some organizations to fully recover from the outage.

On top of that, he said global disruptions to airlines often take days to unclog. 

But even with a fix, Shipley said Friday's outage should be discomforting to everyone. 

"Left unchecked, technology companies will grow as big as they can and have as much impact as they can, because that's how our economic system works," he said.

"There is a necessary requirement for us to have smart regulation of massive tech companies in the same way that we regulate banks, telecommunications providers and others for the public good.

"If we do not get public policy, and particularly the massive gap in education among lawmakers … resolved ASAP, to get a handle on this, we are all going to be suffering from this, and we are all at the mercy of one bad day or one bad actor."

ABOUT THE AUTHOR


Hannah Rudderham is a reporter with CBC New Brunswick. She grew up in Cape Breton, N.S., and moved to Fredericton in 2018. You can send story tips to hannah.rudderham@cbc.ca.

CBC's Journalistic Standards and Practices|
 
 
 
26 Comments


David Amos
No Doubt There will be more news like this to follow

David Amos

Reply to David Amos
https://www.cbc.ca/news/world/worldwide-tech-issues-1.7268863

David Amos
Reply to David Amos
"Cybersecurity firm CrowdStrike apologizes, assures clients issue is not a cyberattack"

I never believe anything until it is officially denied
 
Ralph Steinberg 
Reply to David Amos  
They are supposed to protect them, not update their own software, and crash dozens of businesses.
 
David Amos

Reply to Ralph Steinberg 
Ask yourself why the comment I was answering went the way of the Dodo Bird
 
 
 
Ralph Steinberg  
Crowdstrike, should be litigated into bankruptcy. They failed to do what they are paid for, and caused major industries millions.
 
David Amos
Reply to Ralph Steinberg 
Dream on 
 
 
 
Hugh MacDonald  
Technology is always perfectly dependable until it isn't.
 
David Amos
Reply to Hugh MacDonald  
Oh So True  
 
 
 
Mike May  
One of the the first rules of networking is never run a live update before testing it offline to be sure it causes no harm. Why have IT schools stopped teaching this? It is completely unforgivable for a cybersecurity company to run a live security update before they tested it. The company needs to be shut down and the security handled by Microsoft employees.
 
Ralph Steinberg   
Reply to Mike May  
We ran mirror networking, meaning, we beta tested on a aped platform beside the real one, so that if anything went bad, it only affected the mirrored platform. No company should ever be installing software updates and versions without beta testing it first, specifically when you are supply a service to other businesses.
 
David Amos
Reply to Ralph Steinberg 
This is common knowledge So why did it happen?

 
 
Wilbur Ross
Microsoft support will be calling ... to help with each and everything ... but you'll have to pay with gift cards.💸💸💸

David Amos
Reply to Wilbur Ross
"TD and CIBC referred CBC News to the Canadian Banking Association. A spokesperson said banks were reviewing the situation but that "Canadians can be reassured that our country has a well-protected banking system. Any current impact on banking services would be temporary."

The spokesperson would not confirm what banks were affected."



MR Cain
I remember those days when Microsoft Windows 2,0 would crash and display a blue screen, known informally as the "blue screen of death." The other was freezing up. The solution? unplug then plug in again. Loved technology.



SarahRose Werner
Pretty funny that for all the warnings we get about hackers and cyberattacks, this was caused by neither but rather by a glitch in a software update.

David Amos
Reply to SarahRose Werner
You sure?

Dianne MacPherson 
Reply to David Amos 
Every reputable Website across the Globe

confirms....."glitch in software update".......

WINDOWS .

David Amos
Reply to Dianne MacPherson  
Reputable??? By whose standards?

 
 
Jimmy Cochrane
Crowdstrike.

Primary shareholders :

Blackrock

Vanguard

Enuf said.

David Amos
Reply to Jimmy Cochrane
Amen

Alison Jackson
Reply to Jimmy Cochrane
Why is it "enuf said"?

Yes, large corporations run by corrupt billionaires...what does that have to so with a software update glitch?  

Archie Kravenchuck  
Reply to Jimmy Cochrane 
Great information it all makes sense now. 
 
Archie Kravenchuck  
Reply to Alison Jackson
Having trouble putting 2 and 2 together? 
 
 
 
 
 

Airlines, banks, health care disrupted in global IT outage

Cybersecurity firm CrowdStrike apologizes, assures clients issue is not a cyberattack

How the IT outage is affecting devices using Crowdstrike

Duration 3:59
Canadians are waking up to a global tech outage disrupting operations in multiple industries. Cybersecurity firm Crowdstrike’s Falcon Sensor software is causing Microsoft Windows to crash and display a blue error screen. Cybersecurity and tech analyst Ritesh Kotak explains how the outage is impacting devices subscribed to Crowdstrike and what mitigation actions Microsoft might be taking.

A global tech outage was disrupting operations in multiple industries on Friday, with airlines halting flights, some broadcasters off-air and everything from banking to health care hit by system problems.

According to an alert sent by global cybersecurity firm CrowdStrike to its clients and reviewed by Reuters, the company's Falcon Sensor software is causing Microsoft Windows to crash and display a blue screen, known informally as the "blue screen of death."

The problem crashed Windows machines and servers, sending them into a loop of recovery so that they couldn't restart.

"CrowdStrike is actively working with customers impacted by a defect found in a single content update for Windows hosts," company CEO George Kurtz said in a message posted on social media. "Mac and Linux hosts are not impacted. This is not a security incident or cyberattack. The issue has been identified, isolated and a fix has been deployed."

Just Asking wants to know: What questions do you have about the global IT outage that brought businesses around the world to a halt? Fill out the details on this form and send us your questions ahead of our show on July 20.

"We're deeply sorry for the impact that we've caused to customers, to travellers, to anyone affected by this, including our company," Kurtz said in an interview with NBC's morning news program Today.

Kurtz said that while some systems won't automatically recover, the company would "make sure every customer is fully recovered."

The issue affected Microsoft 365 apps and services. The website Downdetector, which tracks user-reported internet outages, recorded growing outages in services at Visa, ADT security and Amazon, as well as airlines.

Microsoft said on Friday that the underlying cause for outage of its 365 apps and services has been fixed, but the residual impact of cybersecurity outages are continuing to affect some customers.

Scale of outage concerns experts

Even as companies and institutions began restoring regular services, experts said the cyber outage revealed the risks of an increasingly online world.

"This is a very, very uncomfortable illustration of the fragility of the world's core internet infrastructure," Ciaran Martin, professor at Oxford University's Blavatnik School of Government and former head of the U.K. National Cyber Security Centre, told Reuters.

"I'm struggling to think of an outage at quite this scale," said Martin.

A man sleeps on a window ledge over a street Travellers rest at Ronald Reagan Washington National Airport while waiting for a delayed United Airlines flight on Monday. (Nathan Howard/Getty Images)

Ritesh Kotak, cybersecurity and tech analyst, told CBC News Network that clients and consumers will have to be patient.

"A lot of these systems have redundancies that are built into them. So, for example, when one system fails, it can piggyback off another system; it just literally passes the baton," said Kotak.

"It's not as smooth sometimes as one may think … but depending on the scale of the servers impacted sometimes it takes just a little bit of time to pass over that baton and then fix the problem and then bring those services back on to the original servers."

The outage created challenges for some doctors and hospitals in Canada and internationally.

"We are aware of the IT outage and the challenges it is creating for health-care professionals and hospitals. We are actively monitoring the situation and working with partners across Canada to support our health infrastructure," Health Minister Mark Holland said in a statement.

Several airlines affected

Airline traffic was especially affected, though the impacts were variable. A spokesperson from Toronto's Pearson Airport told CBC News the impacts varied "airline to airline."

"As of now, Air Canada, Westjet, Sunwing and Flair operations have not been affected. We're still seeing issues with major American airlines (Delta, American, United) as well as Porter Airlines," Pearson said in a separate statement.

People are shown carrying luggage, with terminal flight arrival and departure boards also visible, in this photo. Travellers are shown at Toronto's Pearson Airport, on Friday. Pearson said that delays were most common with flights to the U.S., and those operated by Porter. (Clara Pasieka/CBC News)

Porter Airlines, which operates flights across Canada and to some U.S. locations, said all flights would be cancelled until at least 3 p.m. on Friday. The company said just after 6 a.m. that its call centre agents did not have access to reservation or rebooking information, and it's directing customers to its website for updates.

"Any passengers needing to cancel travel plans as a direct result of the systems issue will be offered refunds," said Porter. "Normal flight change fees are also being waived."

Out of over 110,000 scheduled commercial flights on Friday, 2,691 have been cancelled globally so far and more are expected to be called off, according to data from global aviation analytics firm Cirium.

Representatives from the international airports in Montreal and Vancouver told CBC News that U.S. customs officials could not process passengers heading to American destinations. U.S. Customs and Border Protection released its own statement indicating the issue, related to the global CrowdStrike outage, had been resolved.

Montreal-Trudeau International Airport said "the problem has been resolved and passenger processing is gradually resuming." 

Airports across Canada have advised customers travelling or doing pickups of family and friends to check flight status with the airlines before heading out.

Traffic delays at points of entry on land between Canada and the U.S. were also reported.

The Canada Border Services Agency (CBSA) said in a statement that it had experienced a partial systems outage of its telephone reporting system that was subsequently resolved. The statement did not make reference to CrowdStrike and Microsoft issues.

An overhead shot shows hundreds of people inside an airport terminal. People wait for their flights following the global outage, at BER airport in Berlin, on Friday. (Nadja Wohlleben/Reuters)

In the U.S., the Federal Aviation Administration said the airlines United, American, Delta and Allegiant had all been grounded for an extended time span.

Internationally, airports from Britain to India and Hong Kong reported delays, with some resorting to manual check-ins. Ryanair and Air India were among the airlines most impacted.

French airports said the issues were airline-specific and the Paris Olympics organizing committee said on Friday the impact of the global outage on its operations was limited and ticket sales were unaffected ahead of the Summer Games, to begin in one week.

Private, public sector issues

CrowdStrike says it has more than 20,000 subscription customers around the world, with over half of Fortune 500 companies using its software, according to company promotional materials from this year.

As a result, a number of companies across sectors were affected.

FedEx Corp said on Friday it experienced substantial disruptions to deliveries throughout its networks.

"Contingency plans have been activated to mitigate impacts but potential delays are possible for package deliveries with a delivery commitment of July 19," FedEx said.

A blue error screen is seen on a computer. The text reads: 'Your PC ran into a problem and needs to restart. We're just collecting some error info, and then we'll restart for you.'     A blue error screen is seen on a computer at CBC's Broadcast Centre in Toronto on Friday. (Anjuli Semple/CBC)

The CBC experienced some issues with automated broadcasting processes, affecting control room operations, cameras and graphics, that were resolved after a few hours.

With files from CBC News and The Associated Press

 
 
 

No comments:

Post a Comment