CrowdStrike global outage: Are we just one bad bit of code away from disaster?

CrowdStrike outage
(Image credit: Getty Images)

We stockpiled, considered building bunkers, and generally prepared for the first tech apocalypse on January 1, 2000, like it might be the end of the world. But the original Y2K came and went and was nothing compared to Y2K24. 

That’s what many have come to call the CrowdStrike outage that sparked a global tech calamity on an unprecedented scale.

The particulars, as we understand them, are this: cybersecurity firm CrowdStrike delivered a bad bit of code to Windows host systems around the world that led to those Windows systems and servers crashing and blue screening across the globe. CrowdStrike has thousands of customers, many of them in business, enterprise, government, travel, health, and more... the list goes on. 

Travel was upended, health providers couldn’t serve patients, banks were unavailable, stock markets closed, and shipments stalled. Everything basically went to hell for most of July 19th, a day that will go down in history as the worst IT outage ever and our Y2K24.

I didn’t make up that term.

See more

I spent most of Friday on TV explaining the outage and answering questions. Most revolved around how this could happen, but TV anchors were equally concerned with how we could prevent this from happening again.

The slow dawning recognition is that the interconnected world we thought we lived in 24 years ago is now real. We thought our globalized system with everything running on computers that had never been programmed to handle the change to the new millennium would doom us, but it turned out that we were missing one key ingredient: the cloud.

In 1999, there was no cloud computing with vast services being delivered to millions over the internet and often updated without knowledge, preparation, or consent.

Y2K

A family stockpiled and ready for Y2K in 1999. (Image credit: Getty Images)

Most business-level cloud services (sometimes known as Software as a Service or SaaS) do get consent and try to prepare clients. But when you’re trying to stay ahead of ever-changing threat factors, that can be difficult. Zero-day attacks mean you must deliver that update to clients now.

CrowdStrike hasn’t fully revealed exactly what happened here and if this possibly bad code was security-related, or just a feature update. But there’s no question that this is the wake-up call we needed.

Our preparation for Y2K seemed almost silly in hindsight because virtually nothing happened. But here we are 24 hours after the biggest tech collapse in memory and some systems are still struggling to recover.

Windows Market Share 2024

Windows Market Share 2024 (Image credit: StatCounter)

The roots of the global collapse are easy to trace. CrowdStrike serves Windows host systems. Windows is still, by a wide margin, the most popular desktop OS (Statcounter has it at 72%). It’s like a global single point of failure. Windows had over 95% market share in 1998. It’s clear the missing component was a dominant cloud service with open-border code delivery to all those Windows systems (that not enough companies had sandboxes for incoming code is another issue).

If we don’t take mitigation steps now, like diversifying cloud-based providers beyond one dominant service, this will happen again. In some ways, we had a warning earlier this year when AT&T went down because of another code mistake. What’s worse is we saw how the knock-on effects can easily spread to other seemingly separate services.

In the case of CrowdStrike, it cuts across so many industries that any time it has a significant failure, everything, and all of us are at risk.

Y2K was always real; it just took 24 years to arrive. I didn’t add this when talking to the anchors but maybe I should’ve: I have no idea how we prepare for the inevitable next global tech collapse.

You might also like

Lance Ulanoff
Editor At Large

A 38-year industry veteran and award-winning journalist, Lance has covered technology since PCs were the size of suitcases and “on line” meant “waiting.” He’s a former Lifewire Editor-in-Chief, Mashable Editor-in-Chief, and, before that, Editor in Chief of PCMag.com and Senior Vice President of Content for Ziff Davis, Inc. He also wrote a popular, weekly tech column for Medium called The Upgrade.

Lance Ulanoff makes frequent appearances on national, international, and local news programs including Live with Kelly and Mark, the Today Show, Good Morning America, CNBC, CNN, and the BBC. 

Read more
Internet outage
Nearly all companies expect a major outage in 2025
Representational image of a hacker
The 10 worst software disasters of 2024: cyberattacks, malicious AI, and silent threats
Twitter social media application change logo to X. Elon Musk CEO of twitter rebranded Twitter to 'X'. Social media application technology concept.
X is back – here's what we know about the 'massive cyberattack' that caused Twitter to go down multiple times
An illustration of a silhouetted thief in motion running while carrying a stolen fingerprint
The 5 worst cyberattacks of 2024
Eu
Is your business ready for DORA? Cisco ThousandEyes outlines the "three pillars" everyone needs to have in place to be resilient
Hack The Box crisis simulation event
“Everyone will experience a hack” - how incident response can protect your organization
Latest in Computing
An iPhone showing the ChatGPT logo on its screen
5 better prompts to use with ChatGPT
Logo of YouTube Shorts
Is YouTube auto-playing Shorts when you open the app? Well, you’re not alone - here’s how to fix it
Dell XPS 13 and Inspiron 15 on a red background next to TechRadar Price Cut badge
Get a powerful XPS 13 with Snapdragon CPU for a record-low price in the latest Dell sale
PowerColor Red Devil AMD RX 9070 XT graphics card shown side-on
Your next GPU could be from AMD, not Nvidia, if Team Red’s success with PC gamers continues
Intel Lunar Lake concept
Intel's Panther Lake processors won't arrive until Q1 2026 - corroborates previous delay rumors despite former Intel CEO's promise of 2025 launch
Quordle on a smartphone held in a hand
Quordle hints and answers for Tuesday, March 18 (game #1149)
Latest in Opinion
A still from Netflix's new miniseries Adolescence starring Stephen Graham
Adolescence is the best show on Netflix right now, and you can watch it in one evening
Sakata in Demon City holds a large cleaver-like weapon
Demon City on Netflix is Japan's answer to John Wick with a dash of Oldboy, and it rocks
A person typing on a laptop to check battery life
How Google's new anti-scraping measures are forcing an industry evolution
An abstract image of digital security.
Technology monitoring solutions are becoming obsolete
AI tools.
Laying the foundations for successful GenAI adoption
A person in a wheelchair working at a computer.
Why betting on Mac security could put your organization at risk