THE BIGGEST-EVER GLOBAL OUTAGE: LESSONS FOR SOFTWARE ENGINEERS
CrowdStrike caused a global outage by pushing a faulty configuration update to its Falcon product, resulting in the crash of 8.5 million Windows machines. The update aimed to enhance threat detection but contained a logic error that caused the CSAgent.sys process to crash the operating system. The recovery process was slow and manual, requiring physical access to each impacted machine. While CrowdStrike is primarily responsible, Microsoft's inability to restrict third-party software from running at kernel level due to a 2009 agreement with the European Commission also worsened the situation.