CrowdStrike said they sent out a bad Windows update, and New York's Chief Cyber Officer said it's not a security incident or cyberattack.
ALBANY, N.Y. (NEXSTAR) — An internet outage hit airlines, banks, 911 centers, and media outlets across the world on Friday, including across New York State. The cybersecurity firm CrowdStrike partners with Amazon Web Services and Microsoft Defender to prevent cyber attacks, and they said they sent a bad update to Windows computers.
They said they're working on the issue, which is not related to a cyberattack. A statement from the state's Chief Cyber Officer Colin Ahern read:
We are aware of an issue affecting Windows computers running a third party security software tool that is impacting systems and services worldwide. It is not a security incident or cyberattack.
We are working with our agencies, local governments, and the third party service provider to resolve any issues on impacted systems. Our priority is to ensure all 911 systems across New York are operational and able to address emergency response needs. The third party has identified a fix for the underlying issue and the New York State Office of Information Technology Services is actively working with other state agencies on a resolution. We do not yet have a timeline for full restoration.
Governor Hochul is closely monitoring impacts to critical infrastructure, including finance and transportation. We recognize the impact this is having on services, not only across New York but also globally.
In 2022, Hochul launched a $30 million statewide shared cybersecurity services program. "My administration is laser-focused on providing cyber security resources for local governments," she said at the time. "By launching this new $30 million program, we are bolstering the state's capabilities to respond to the evolving threat of cyberattacks and strengthening our ability to protect New York's institutions, infrastructure, citizens, and public safety."
Apparently designed for government systems with CrowdStrike, "endpoint detection and response services" were rolled out to Albany, Buffalo, Syracuse, Rochester, and Yonkers.
"New York State will now be empowered with CrowdStrike's unparalleled technology to stop threats in their tracks," said CrowdStrike Chief Security Officer Shawn Henry in 2022. "Our comprehensive platform approach will help to share crucial intelligence and security data to improve coordination across the state and keep bad actors off networks for good. We look forward to serving the people of New York as a key partner in the fight against cyber threats."
The Associated Press contributed to this report.
