Canary in a CrowdStrike

Cybersecurity giant's blunder is a warning for the whole world

“A full-blown rollout from a security vendor to every customer within minutes is very dangerous.” – Dave DeWalt, former CEO of cybersecurity company McAfee, in a recent Wall Street Journal article.

---

CrowdStrike has stumbled upon a obvious insight after its buggy software update shuttered governments, businesses, hospitals, airlines and consumers around the globe – leading to billions in damages.

The cybersecurity giant calls it “canary deployment.” This means gradually rolling out software updates in the future so that the company can check for looming catastrophes.

This way, not every Microsoft Windows user gets the dreaded “blue screen of death.” This way, only one airline shuts down instead of several of them. This way, only a few hospitals take a hit while CrowdStrike fixes its glitch.

Somehow, coming to this revelation is costing the company billions in market value, restitution and damage to its otherwise stellar reputation.

Not using canary deployment is like staging an outdoor rally for a presidential candidate – a risky proposition in itself – and not checking rooftops for snipers.

Thousands are paying the price. CrowdStrike should not have risked leaving all of its customers CrowdStuck.

Whose bird-brained idea was this? (Illustration: AI generated.)

The hottest software stock of 2024?

CrowdStrike stock has plunged nearly 30% since its disaster unfolded last week. Thousands of Americans who never heard of CrowdStrike are aware of it now after being stranded at airports, locked out of their computer systems, and stymied in business.