ІНСАЙДЕР УКРАЇНА

sydney — Australia’s cyber intelligence agency said on Saturday that “malicious websites and unofficial code” were being released online claiming to aid recovery from Friday’s global digital outage, which hit media, retailers, banks and airlines. 

Australia was one of many countries affected by the outage that caused havoc worldwide after a botched software update from CrowdStrike. 

On Saturday, the Australian Signals Directorate — the country’s cyber intelligence agency — said “a number of malicious websites and unofficial code are being released claiming to help entities recover from the widespread outages caused by the CrowdStrike technical incident.” 

On its website, the agency said its cyber security center “strongly encourages all consumers to source their technical information and updates from official CrowdStrike sources only.” 

Cyber Security Minister Clare O’Neil said on social media platform X on Saturday that Australians should “be on the lookout for possible scams and phishing attempts.” 

CrowdStrike — which previously reached a market cap of about $83 billion — is a major cybersecurity provider, with close to 30,000 subscribers globally. 
…

Paris — Airlines were gradually coming back online Saturday after global carriers, banks and financial institutions were thrown into turmoil by one of the biggest IT crashes in recent years, caused by an update to an antivirus program.

Passenger crowds had swelled at airports Friday to wait for news as dozens of flights were canceled and operators struggled to keep services on track, after an update to a program operating on Microsoft Windows crashed systems worldwide.

Multiple U.S. airlines and airports across Asia said they were now resuming operations, with check-in services restored in Hong Kong, South Korea and Thailand, and mostly back to normal in India and Indonesia and at Singapore’s Changi Airport as of Saturday afternoon.

“The check-in systems have come back to normal [at Thailand’s five major airports]. There are no long queues at the airports as we experienced yesterday,” Airports of Thailand President Keerati Kitmanawat told reporters at Don Mueang airport in Bangkok.

Microsoft said the issue began at 1900 GMT on Thursday, affecting Windows users running the CrowdStrike Falcon cybersecurity software.

CrowdStrike said it had rolled out a fix for the problem, and the company’s boss, George Kurtz, told U.S. news channel CNBC he wanted to “personally apologize to every organization, every group and every person who has been impacted.”

It also said it could take a few days to return to normal.

U.S. President Joe Biden’s team was talking to CrowdStrike and those affected by the glitch “and is standing by to provide assistance as needed,” the White House said in a statement.

“Our understanding is that flight operations have resumed across the country, although some congestion remains,” a senior US administration official said.

Other industries

Reports from the Netherlands and Britain suggested health services might have been affected by the disruption, meaning the full impact might not yet be known.

Media companies were also hit, with Britain’s Sky News saying the glitch had ended its Friday morning news broadcasts, and Australia’s ABC similarly reporting major difficulties.

By Saturday, services in Australia had mostly returned to normal, but Sydney Airport was still reporting flight delays.

Australian authorities warned of an increase in scam and phishing attempts following the outage, including people offering to help reboot computers and asking for personal information or credit card details.

Banks in Kenya and Ukraine reported issues with their digital services, while some mobile phone carriers were disrupted and customer services in a number of companies went down.

“The scale of this outage is unprecedented and will no doubt go down in history,” said Junade Ali of Britain’s Institution of Engineering and Technology, adding that the last incident approaching the same scale was in 2017.

Flight chaos

While some airports halted all flights, in others airline staff resorted to manual check-ins for passengers, leading to long lines and frustrated travelers.

The U.S. Federal Aviation Administration initially ordered all flights grounded “regardless of destination,” although airlines later said they were reestablishing their services and working through the backlog.

India’s largest airline, Indigo, said operations had been “resolved,” in a statement posted on social media platform X.

“While the outage has been resolved and our systems are back online, we are diligently working to resume normal operations, and we expect this process to extend into the weekend,” the carrier said Saturday.

A passenger told AFP that the situation was returning to normal at Delhi Airport by midnight on Saturday with only slight delays in international flights.

Low-cost carrier AirAsia said it was still trying to get back online and had been “working around the clock toward recovering its departure control systems” after the global outage. It recommended passengers arrive early at airports and be ready for “manual check-in” at airline counters.

Chinese state media said Beijing’s airports had not been affected.

In Europe, major airports, including Berlin’s, which had suspended all flights earlier on Friday, said departures and arrivals were resuming.

‘Common cause’

Companies were left patching up their systems and trying to assess the damage, even as officials tried to tamp down panic by ruling out foul play.

CrowdStrike’s Kurtz said in a statement his teams were “fully mobilized” to help affected customers and “a fix has been deployed.”

But Oli Buckley, a professor at Britain’s Loughborough University, was one of many experts who questioned the ease of rolling out a proper fix.

“While experienced users can implement the workaround, expecting millions to do so is impractical,” he said.

Other experts said the incident should prompt a widespread reconsideration of how reliant societies are on a handful of tech companies for such an array of services.

“We need to be aware that such software can be a common cause of failure for multiple systems at the same time,” said John McDermid, a professor at York University in Britain.

He said infrastructure should be designed “to be resilient against such common cause problems.”
…

WELLINGTON, New Zealand — A global technology outage grounded flights, knocked banks and hospital systems offline and media outlets off air on Friday in a massive disruption that affected companies and services around the world and highlighted dependence on software from a handful of providers.

Cybersecurity firm CrowdStrike said that the issue believed to be behind the outage was not a security incident or cyberattack — and that a fix was on the way. The company said the problem occurred when it deployed a faulty update to computers running Microsoft Windows.

But hours after the problem was first detected, the disarray continued — and escalated.

Long lines formed at airports in the U.S., Europe and Asia as airlines lost access to check-in and booking services at a time when many travelers are heading away on summer vacations. News outlets in Australia — where telecommunications were severely affected — were pushed off air for hours. Hospitals and doctor’s offices had problems with their appointment systems, while banks in South Africa and New Zealand reported outages to their payment system or websites and apps.

Some athletes and spectators descending on Paris ahead of the Olympics were delayed, but Games organizers said disruptions were limited and didn’t affect ticketing or the torch relay.

DownDectector, which tracks user-reported disruptions to internet services, recorded that airlines, payment platforms and online shopping websites across the world were affected — although the disruption appeared piecemeal and was apparently related to whether the companies used Microsoft cloud-based services.

Cyber expert James Bore said real harm would be caused by the outage because systems we’ve come to rely on at critical times are not going to be available. Hospitals, for example, will struggle to sort out appointments and those who need care may not get it.

“There are going to be deaths because of this. It’s inevitable,” Bore said. “We’ve got so many systems tied up with this.”

Microsoft 365 posted on social media platform X that the company was “working on rerouting the impacted traffic to alternate systems to alleviate impact” and that they were “observing a positive trend in service availability.”

The company did not respond to a request for comment.

CrowdStrike said in an emailed statement that the company “is actively working with customers impacted by a defect found in a single content update for Windows hosts.”

It said: “This is not a security incident or cyberattack. The issue has been identified, isolated and a fix has been deployed.”

The Austin, Texas-based company’s Nasdaq-traded shares were down nearly 15% in premarket trading early Friday.

A recording playing on its customer service line said, “CrowdStrike is aware of the reports of crashes on Microsoft ports related to the Falcon sensor,” referring to one of its products used to block online attacks.

Meanwhile, governments, officials and companies across the world scrambled to respond.

New Zealand’s acting prime minister, David Seymour, said on X that officials in the country were “moving at pace to understand the potential impacts,” adding that he had no information indicating it was a cybersecurity threat.

The issue was causing “inconvenience” for the public and businesses, he added.

On Friday morning, major delays reported at airports grew, with most attributing the problems in booking systems of individual airlines.

In the U.S., the FAA said the airlines United, American, Delta and Allegiant had all been grounded.

Airlines and railways in the U.K. were also affected, with longer than usual waiting times.

With athletes and spectators arriving from around the world for the Paris Olympics, the city’s airport authority said its computer systems were not affected by the outage, but that disruptions to airline operations was causing delays at two major Paris airports. The Paris Olympics organizers said the outage affected their computer systems and the arrival of some delegations and their uniforms and accreditations had been delayed.

But the impact was limited, the organizers said, and the outages had not affected ticketing or the torch relay.

In Germany, Berlin-Brandenburg Airport halted flights for several hours due to difficulties in checking in passengers, while landings at Zurich airport were suspended and flights in Hungary, Italy and Turkey disrupted.

The Dutch carrier KLM said it had been “forced to suspend most” of its operations.

Amsterdam’s Schiphol Airport warned that the outage was having a “major impact on flights” to and from the busy European hub. The chaotic morning coincided with one of the busiest days of the year for Schiphol.

Widespread problems were reported at Australian airports, where lines grew and some passengers were stranded as online check-in services and self-service booths were disabled — although flights were still operating.

In India, Hong Kong and Thailand, many airlines were forced to manually check in passengers. An airline in Kenya was also reporting disruption.

While the outages were being experienced worldwide, Australia appeared to be severely affected by the issue. Disruption reported on the site DownDetector included the banks NAB, Commonwealth and Bendigo, and the airlines Virgin Australia and Qantas, as well as internet and phone providers such as Telstra.

National news outlets — including public broadcaster ABC and Sky News Australia — were unable to broadcast on their TV and radio channels for hours. Some news anchors went on air online from dark offices, in front of computers showing “blue screens of death.”

Hospitals in several countries also reported problems.

Britain’s National Health Service said the outage caused problems at most doctors’ offices across England. NHS England said in a statement said the glitch was affecting the appointment and patient record system used across the public health system.

Some hospitals in northern Germany canceled all elective surgery scheduled for Friday, but emergency care was unaffected.

Israel said its hospitals and post office operations were disrupted.

In South Africa, at least one major bank said it was experiencing nationwide service disruptions as customers reported they were unable to make payments using their bank cards in stores. The New Zealand banks ASB and Kiwibank said their services were down as well.

Shipping was disrupted too: A major container hub in the Baltic port of Gdansk, Poland, the Baltic Hub, said it was battling problems resulting from the global system outage.
…

…

Nairobi, Kenya — Experts say Africa needs to invest in robust infrastructure if the continent is to have reliable internet after recent outages due to underwater cable failures highlighted the continent’s reliance on single-path connectivity.

Disruptions in March and May caused online banking problems and communication delays. Businesses experienced interruptions in many countries.

In March, on the Atlantic coast of West Africa, four submarine cables that deliver the internet to at least 17 countries went offline.

Less than two months later, Eastern and Southern Africa experienced outages after two undersea cables were damaged. In Tanzania, the U.S. Embassy in Dar es Salaam closed for two days due to the disruption.

Ben Gumo, a Kenyan who relies on the internet to sell clothes, shoes and children’s wares, said he lost business during the May disruption.

“Someone … puts stuff in the [online] basket, but because of the outage he cannot complete the sale, so he cancels,” Gumo said, adding that he couldn’t update his website with new products.

According to the telecommunications research company Telegeography, over 100 cable cuts occur globally each year. Experts blame undersea volcanic activity, rock falls, recent rainfall and currents in rivers that are much stronger than when some of the cables were built.

Manmade activities also cause disruptions. According to one report, a ship was attacked in the Red Sea and drifted, its anchor pulling up three underwater cables.

Mike Last works with the West Indian Ocean Cable Company, which operates in 20 African countries and has built 36 data centers. He said recent disruptions prompted government officials and businesspeople to recognize the need for better internet infrastructure.

“What it made people realize is that you have to invest in a reliable network, you have to invest in redundancy,” Last said, meaning that internet service is provided by more than one source. “We’ve seen a real boom in clients coming to us wanting connectivity on the new subsea systems.”

Some countries can stay online when one internet source is cut off, although service is often slow and not stable, because service providers and telecommunication carriers invested in more than one international connection.

According to the World Bank, sub-Saharan Africa’s digital infrastructure coverage, access and quality are far behind those of other regions.

However, Africa is embracing the digital future. According to the Submarine Cable Networks, 37 countries have at least one subsea cable connection, and 20 countries have more than two subsea cables.

Last said cables planned by Google and Meta will improve connectivity.

One of the new cables, he said, has a high capacity. Another new cable — named 2Africa and led by Meta, the parent company of Facebook — is being built all the way around Africa.

“It brings a lot of capacity to Africa, and that will help,” Last said.

Experts warn that disparities in connectivity across Africa are expected, but that the development of infrastructure, government policies and private sector investments can accelerate growth.
…