On 19 July 2024, a faulty update from cybersecurity vendor CrowdStrike triggered what’s widely regarded as the largest IT outage in history. A defect in its Falcon security sensor sent millions of Windows machines into a continuous “blue screen of death” — all at once, right across the world.
The fallout was immediate and physical. Airlines grounded flights, hospitals postponed procedures, and banks, broadcasters and retailers simply froze. Microsoft estimated that around 8.5 million Windows devices were affected. Crucially, this was not a cyberattack — it was a botched update to trusted software.
Why this matters
- Trusted software can fail too — the damage came from a tool meant to protect systems. “Trusted” doesn’t mean “risk-free”.
- Concentration is a hidden risk — when millions depend on the same vendor, one mistake cascades globally within minutes.
- Recovery readiness beats prevention alone — many machines needed hands-on fixes; organisations with tested recovery plans were back fastest.
- Update management is a discipline — staged rollouts and quick rollback limit the blast radius when something slips through.
What we’d advise
For SMEs, the lesson isn’t to distrust security tools — it’s to build resilience around them: monitored systems, tested recovery procedures, and a clear plan for when a critical system simply stops. We help clients put exactly that in place, so a bad day stays a bad day rather than becoming a bad month.
Source: widely reported at the time, including by the BBC and Reuters; Microsoft published the affected-device estimate and recovery guidance.