All posts by: Magazine Editor

Written by Richard Forno, principal lecturer in computer science and electrical engineering, UMBC

The global information technology outage on July 19, 2024, that paralyzed organizations ranging from airlines to hospitals and even the delivery of uniforms for the Olympic Games represents a growing concern for cybersecurity professionals, businesses and governments.

The outage is emblematic of the way organizational networks, cloud computing services and the internet are interdependent, and the vulnerabilities this creates. In this case, a faulty automatic update to the widely used Falcon cybersecurity software from CrowdStrike caused PCs running Microsoft’s Windows operating system to crash. Unfortunately, many servers and PCs need to be fixed manually, and many of the affected organizations have thousands of them spread around the world.

For Microsoft, the problem was made worse because the company released an update to its Azure cloud computing platform at roughly the same time as the CrowdStrike update. Microsoft, CrowdStrike and other companies like Amazon have issued technical work-arounds for customers willing to take matters into their own hands. But for the vast majority of global users, especially companies, this isn’t going to be a quick fix.

Modern technology incidents, whether cyberattacks or technical problems, continue to paralyze the world in new and interesting ways. Massive incidents like the CrowdStrike update fault not only create chaos in the business world but disrupt global society itself. The economic losses resulting from such incidents – lost productivity, recovery, disruption to business and individual activities – are likely to be extremely high.

As a former cybersecurity professional and current security researcher, I believe that the world may finally be realizing that modern information-based society is based on a very fragile foundation.

The bigger picture

Interestingly, on June 11, 2024, a post on CrowdStrike’s own blog seemed to predict this very situation – the global computing ecosystem compromised by one vendor’s faulty technology – though they probably didn’t expect that their product would be the cause.

Software supply chains have long been a serious cybersecurity concern and potential single point of failure. Companies like CrowdStrike, Microsoft, Apple and others have direct, trusted access into organizations’ and individuals’ computers. As a result, people have to trust that the companies are not only secure themselves, but that the products and updates they push out are well-tested and robust before they’re applied to customers’ systems. The SolarWinds incident of 2019, which involved hacking the software supply chain, may well be considered a preview of today’s CrowdStrike incident.

CrowdStrike CEO George Kurtz said “this is not a security incident or cyberattack” and that “the issue has been identified, isolated and a fix has been deployed.” While perhaps true from CrowdStrike’s perspective – they were not hacked – it doesn’t mean the effects of this incident won’t create security problems for customers. It’s quite possible that in the short term, organizations may disable some of their internet security devices to try and get ahead of the problem, but in doing so they may have opened themselves up to criminals penetrating their networks.

It’s also likely that people will be targeted by various scams preying on user panic or ignorance regarding the issue. Overwhelmed users might either take offers of faux assistance that lead to identity theft, or throw away money on bogus solutions to this problem.

What to do

Organizations and users will need to wait until a fix is available or try to recover on their own if they have the technical ability. After that, I believe there are several things to do and consider as the world recovers from this incident.

Companies will need to ensure that the products and services they use are trustworthy. This means doing due diligence on the vendors of such products for security and resilience. Large organizations typically test any product upgrades and updates before allowing them to be released to their internal users, but for some routine products like security tools, that may not happen.

Governments and companies alike will need to emphasize resilience in designing networks and systems. This means taking steps to avoid creating single points of failure in infrastructure, software and workflows that an adversary could target or a disaster could make worse. It also means knowing whether any of the products organizations depend on are themselves dependent on certain other products or infrastructures to function.

Organizations will need to renew their commitment to best practices in cybersecurity and general IT management. For example, having a robust backup system in place can make recovery from such incidents easier and minimize data loss. Ensuring appropriate policies, procedures, staffing and technical resources is essential.

Problems in the software supply chain like this make it difficult to follow the standard IT recommendation to always keep your systems patched and current. Unfortunately, the costs of not keeping systems regularly updated now have to be weighed against the risks of a situation like this happening again.

This article is republished from The Conversation under a Creative Commons license. Read the original article and see more than 250 UMBC articles available in The Conversation.

Written by Richard Forno, principal lecturer in computer science and electrical engineering, UMBC

The attempted assassination of Donald Trump on July 13, 2024, added more fuel to an already fiery election season. In this case, political violence was carried out against the party that is most often found espousing it. The incident shows how uncontrollable political violence can be – and how dangerous the current times are for America.

Part of the complication is the contentious and adversarial nature of American politics, of course. But technology makes it more difficult for Americans to understand sudden news developments.

Gone are the days when only a handful of media outlets reported the news to broad swaths of society after rigorous fact-checking by professional journalists.

By contrast, anyone today can “report” news online, provide what they claim is “analysis” of events, and combine fact, fiction, speculation and opinion to fit a desired narrative or political perspective.

Then that perspective is potentially made to seem legitimate by virtue of the poster’s official office, net worth, number of social media followers, or attention from mainstream news organizations seeking to fill news cycles.

And that’s before any mention of convincing deepfake audio and video clips, whose lies and misrepresentations can further sow confusion and distrust online and in society.

Today’s internet-based narratives also often involve personal attacks either directly or through inference and suggestion – what experts call “stochastic terrorism” that can motivate people to violence. Political violence is the inevitable result – and has been for years, including attacks on U.S. Rep. Gabby Giffords, former House Speaker Nancy Pelosi’s husband, Paul, the 2017 congressional baseball practice shooting, the Jan. 6, 2021 insurrection, and now the attempted assassination of a former president running for the White House again.

When bullets and conspiracies fly

As a security and internet researcher it was entirely predictable to me that within minutes of the attack, right-wing social media exploded with instant-reaction narratives that assigned blame to political rivals, the media, or implied that a sinister “inside job” by the federal government was behind the incident.

But it wasn’t just average internet users or prominent business magnates fanning these flames. Several Republicans issued such statements from their official social media accounts. For instance, less than an hour after the attack, Georgia Congressman Mike Collins accused President Joe Biden of “inciting an assassination” and said Biden “sent the orders.” Ohio Senator J.D. Vance, now Trump’s nominee for vice president, also implied that Biden was responsible for the attack.

The bloodied former president stood up and delayed his Secret Service evacuation for a fist-pumping photo before leaving the rally, and his campaign issued a defiant fundraising email later that evening. This led some Trump critics to suggest the incident was a “false flag” attack staged to earn a sympathetic national spotlight. Others claimed the incident fits into Trump’s ongoing messaging to supporters that he’s the victim of persecution.

From a historical perspective, it’s worth noting former Brazil right-wing President Jair Bolsonaro survived an assassination attempt in 2018 to become the country’s next president in 2019.

It’s long been known that internet narratives, memes and content can spread around the world like wildfire well before the actual truth becomes known. Unfortunately, those narratives, whether factual or fictional, can get picked up – and thus given a degree of perceived legitimacy and further disseminated – by traditional news organizations.

Many who see such messages, amplified by both social media and traditional news services, often believe them – and some may respond with political violence or terrorism.

Can anything help?

Several threads of research show that there are some ways regular people can help break this dangerous cycle.

In the immediate aftermath of breaking news, it’s important to remember that first reports often are wrong, incomplete or inaccurate. Rather than rushing to repost things during rapidly developing news events, it’s best to avoid retweeting, reposting or otherwise amplifying online content right away. When information has been confirmed by multiple credible sources, ideally across the political spectrum, then it’s likely safe enough to believe and share.

In the longer term, as a nation and a society, it will be useful to further understand how technology and human tendencies interact. Teaching schoolchildren more about media literacy and critical thinking can help prepare future citizens to separate fact from fiction in a complex world filled with competing information.

Another potential approach is to expand civics and history lessons in school classrooms, to give students the ability to learn from the past and – we can all hope – not repeat its mistakes.

Social media companies are part of the potential solution, too. In recent years, they have disbanded teams meant to monitor content and boost users’ trust in the information available on their platforms. Recent Supreme Court rulings make clear that these companies are free to actively police their platforms for disinformation, misinformation and conspiracy theories if they wish. But companies and purported “free speech absolutists” including X owner Elon Musk, who refuse to remove controversial, though technically legal, internet content from their platforms may well endanger public safety.

Traditional media organizations bear responsibility for objectively informing the public without giving voice to unverified conspiracy theories or misinformation. Ideally, qualified guests invited to news programs will add useful facts and informed opinion to the public discourse instead of speculation. And serious news hosts will avoid the rhetorical technique of “just asking questions” or engaging in “bothsiderism” as ways to move fringe theories – often from the internet – into the news cycle, where they gain traction and amplification.

The public has a role, too.

Responsible citizens could focus on electing officials and supporting political parties that refuse to embrace conspiracy theories and personal attacks as normal strategies. Voters could make clear that they will reward politicians who focus on policy accomplishments, not their media imagery and social media follower counts.

That could, over time, deliver the message that the spectacle of modern internet political narratives generally serve no useful purpose beyond sowing social discord and degrading the ability of government to function – and potentially leading to political violence and terrorism.

Understandably, these are not instant remedies. Many of these efforts will take time – potentially even years – and money and courage to accomplish.

Until then, maybe Americans can revisit the golden rule – doing onto others what we would have them do unto us. Emphasizing facts in the news cycle, integrity in the public square, and media literacy in our schools seem like good places to start as well.

This article is republished from The Conversation under a Creative Commons license. Read the original article and see more than 250 UMBC articles available in The Conversation.