Mass IT outage shows how exposed services are, says expert

A widespread IT outage affecting sectors from the NHS to transport and banking to media has been described as an unprecedented sign of how exposed services are with a potential overreliance on certain operating systems.

The major disruption could prompt a rethink on whether the most resilient operating systems are being used and whether it is “lazy” to stick with what we know, according to cybersecurity expert Dr Harjinder Lallie.

The associate professor at the University of Warwick described the situation as an IT “catastrophe”.

We didn’t know how exposed we were until this happened. Now it’s happened we’re tracing it back and realising ‘crikey, how much reliance we have on these two systems’

He said: “The worldwide IT outage experienced this morning is unprecedented in the range and scale of systems it has impacted.”

He added: “This IT ‘catastrophe’ highlights the need for greater resilience, a greater focus on back-up systems, and possibly even a need to rethink whether we are using the most resilient operating systems for such critical systems.”

Global cybersecurity firm CrowdStrike, which provides cyber attack monitoring and protection to many major businesses, has said the problem was caused by a “defect found in a single content update for Windows hosts”, adding that it was not a security incident or cyber attack.

Dr Lallie told the PA news agency: “We have here a particular combination of tools – an operating system and a tool at the other end and once you put those combinations together you suddenly find that it’s impacting a lot of systems. There is an over-reliance on a) Microsoft b) in this case CrowdStrike at the other end.

“Somewhere between the two there’s been a problem which has caused what is an absolutely unprecedented global outage.

“I’ve never seen anything like this before. We had the NHS , WannaCry (ransomware attack), that was serious. But this is planes, TV stations, it’s such a massive impact.”

He said the issue has demonstrated how exposed companies and services can be.

He said: “We didn’t know how exposed we were until this happened. Now it’s happened we’re tracing it back and realising ‘crikey, how much reliance we have on these two systems’.”

He suggested there could be more diversity in use of different operating systems.

He said: “Windows is brilliant, Microsoft is brilliant but there are other operating systems that we could be using in certain mission-critical systems and companies need to think very carefully about, in this particular scenario, is Microsoft the best option or should we actually take the plunge and go with another operating system?

“I don’t know if those conversations are being had or if we are, excuse the term, being lazy and just sticking with Microsoft because we know Microsoft really well.”

Asked why this might be, he said the “massive” cost of training staff on new systems could be a consideration.

Professor Ciaran Martin, who was the founding chief executive of the National Cyber Security Centre (NCSC), said early indications appeared to suggest an update by global cybersecurity firm CrowdStrike “seems to have been misconfigured in such a way that it wrecks (Microsoft) Windows”.

He told BBC Radio Four’s Today programme: “So if a company is using both CrowdStrike and Windows for its operating system, it seems that they get what people in the trade call the ‘blue screen of death’, and Windows doesn’t work.

“And that’s why airlines aren’t able to process, presumably why Sky hasn’t been able to broadcast. It’s also why just simply for timezone reasons it seems to be emerging first in Australia.”

He said companies usually spend “a lot of time, money and effort” making sure complex IT systems are compatible and can interact without something like this happening.

He said: “Most of the time that works. Occasionally, it doesn’t”, adding that it is “very rare to be as serious as this”.

Worldwide tech issue grounds planes, disrupts trains and GP chaos - LIVE

Why Carsley deserves to be in the mix to replace Southgate

Zelensky appeals for permission to strike Russian targets in Cabinet address