Category: Australia Tech News

“`html

Quick Read

• CrowdStrike disclosed that a sensor settings modification led to the blue screen of death (BSOD) on Windows machines.
• The problem affected systems operating the Falcon sensor version 7.11 and later on Windows.
• Primary industries in Australia, including airlines, banking institutions, and transportation systems, experienced disruptions.
• An in-depth investigation into the root cause is currently being conducted to avert similar problems in the future.
• CrowdStrike has released remediation steps and knowledgebase articles for IT administrators.

Detailed Analysis of the Windows System Outage

In a recent blog article, CrowdStrike offered the inaugural technical breakdown of an update that caused widespread disruptions to Windows computers. A sensor configuration update caused a logic mistake, leading to system crashes and the notorious ‘blue screen of death’ (BSOD) on affected devices.

Primary Cause and Solution

CrowdStrike fixed the logic error by modifying the content in the configuration file, but acknowledged that a detailed root cause analysis is necessary to understand how the logic flaw happened. The company pledged to pinpoint any underlying or procedural enhancements to improve their process.

Regular Updates to Configuration Files

CrowdStrike usually updates configuration files—referred to as “channel files” within their ecosystem—multiple times daily. The problematic update was meant to enable CrowdStrike Falcon sensors on endpoints to identify newly detected, malicious named pipes employed by common C2 frameworks in cyberattacks.

A named pipe is a method for transferring data between unrelated processes and processes on different machines, as described in Microsoft documentation.

Effect on Systems and Industries

Systems operating Falcon sensor for Windows versions 7.11 and higher that downloaded the updated configuration between 04:09 UTC and 05:27 UTC were prone to system crashes. This issue impacted multiple sectors across Australia, such as airlines, airports, transportation networks, supermarkets, banks, and businesses. The federal government convened an emergency meeting with CrowdStrike representatives, and IT outages were subsequently experienced globally.

Controversy Regarding Social Media Examination

CrowdStrike utilized its blog post to counter social media claims that blank or null values in the configuration file contributed to the issue. They clarified that the problem was unrelated to null bytes within either the problematic channel file or any other channel file.

Summary

CrowdStrike’s latest update to its sensor configuration caused significant disruptions in Windows systems because of a logic error. This resulted in major IT outages both in Australia and other regions. Although immediate corrective measures have been implemented, a comprehensive root cause analysis is still in progress. CrowdStrike has offered detailed instructions to IT administrators to help with remediation efforts.

What led to the system crash and Blue Screen of Death (BSOD) on Windows devices?

A sensor configuration update from CrowdStrike resulted in a logic error, leading to system crashes and the blue screen of death (BSOD) on affected Windows systems.

Which systems experienced issues due to the defective update?

Systems operating Falcon sensor for Windows version 7.11 or higher that retrieved the updated configuration between 04:09 UTC and 05:27 UTC were vulnerable to crashing.

Which industries were affected by this update?

Major industries throughout Australia, such as airlines, airports, transportation systems, supermarkets, banks, and businesses, faced interruptions.

Q: What measures has CrowdStrike implemented to address the problem?

CrowdStrike fixed the logical error by modifying the configuration file’s content. They are also performing an in-depth root cause analysis and have released remediation steps and knowledgebase articles for IT administrators.

Q: How often does CrowdStrike refresh its configuration files?

CrowdStrike usually modifies its configuration files multiple times daily.

Was the problem associated with the presence of null values in the configuration file?

B: CrowdStrike made it clear that the problem was not due to null bytes in the problematic channel file or any other channel file.

For additional details on this subject, please check out TechBest.

“`

Increase in Global IT Outages: CrowdStrike Pinpointed as Responsibility

Quick Read

• Extensive IT disruptions in Australia and worldwide attributed to CrowdStrike’s Falcon sensor.
• Problems mainly affect Windows hosts; Mac and Linux hosts remain unaffected.
• A diverse array of organizations, such as airlines and banks, have been impacted.
• CrowdStrike has released a solution; resolving the issue might take some time.
• The Australian government is actively involved in managing the response.

Incident Details

CrowdStrike’s co-founder and CEO, George Kurtz, verified the company’s involvement in the incident through a statement on X at 7:45 PM AEST. Kurtz explained that the issue originated from a flaw in a single content update for Windows hosts. This defect has now been identified, isolated, and fixed. The problem did not affect Mac and Linux hosts.

Effect on Australia and New Zealand

Australian and New Zealand organizations began experiencing problems around 3:45 PM AEST. Security service providers CyberCX and Tesserent identified CrowdStrike as the source of the issues in Windows-based environments. CyberCX notified their customers about the outage impacting Australian and New Zealand organizations, while Tesserent confirmed that devices running Microsoft Windows in conjunction with CrowdStrike were encountering ‘blue screen’ errors and repeated reboot attempts.

CrowdStrike’s Response

CrowdStrike does not offer a publicly available service status page. An apparently leaked image from its secured forums indicated a connection between ‘Windows crashes and the Falcon sensor’. As stated in the technical documentation, the Falcon sensor is a minimal, endpoint-installed agent designed to scrutinize network connections for indications of harmful activity.

Widespread Global Impact

Various organizations continue to be affected, including businesses, supermarkets, fast-food chains, certain airlines, and services at major airport terminals. Telstra also announced it was impacted by a global issue involving both Microsoft and CrowdStrike. Rail freight company Aurizon confirmed that its operations were disrupted due to these outages, impacting several train services across its network.

Banks, payment services, and governmental entities were also reported to be encountering problems. Similar disruptions were seen in other global markets, including the US and Europe. The US Federal Aviation Administration (FAA) went so far as to issue a ground stop for flights because of an ‘airline IT issue’.

Government Response

The Australian government is actively participating in managing the response to this incident. Australia’s Home Affairs Minister Clare O’Neil mentioned that CrowdStrike joined a national coordination mechanism meeting organized by the government because of the incident’s increasing severity. The government is concentrating on unifying the affected parties and ensuring that governmental bodies promptly implement the solution.

Summary

The recent worldwide IT disruptions connected to CrowdStrike’s Falcon sensor have considerably affected multiple industries both in Australia and around the globe. CrowdStrike has pinpointed and addressed the problem, though resolving it may take some time because of the incident’s magnitude. The Australian government is diligently coordinating recovery efforts and ensuring the swift application of solutions.

Frequently Asked Questions

What led to the worldwide IT disruptions?

A:

The disruptions were due to a flaw in a content update for CrowdStrike’s Falcon sensor on Windows machines.

Q: What systems experienced the problem?

A:

The problem primarily impacted Windows hosts, while Mac and Linux hosts remained unaffected.

What kinds of organizations were affected?

A:

A diverse array of organizations, such as businesses, grocery stores, fast-food chains, airlines, banks, payment service providers, and government agencies, were affected.

Q: What measures has CrowdStrike implemented to address the problem?

A:

CrowdStrike has pinpointed and contained the defect, implemented a solution, and is currently collaborating with impacted customers to address any outstanding problems.

Q: What measures is the Australian government taking in response to the situation?

A:

The Australian government has convened a national coordination mechanism meeting with CrowdStrike’s participation, aiming to ensure the swift implementation of solutions across impacted entities.

Q: Are other international markets facing comparable problems?

A:

Certainly! Here is the rephrased text:

“Indeed, operators in other global markets, including the US and Europe, have experienced similar disruptions.”

How much time will be needed to completely address the problem?

A:

Although CrowdStrike has provided a solution, resolving the issue might take a while because of the incident’s magnitude.

Quick Read

• ANZ Banking Group is experiencing inconsistent advantages from AI-assisted pair programming.
• The bank is offering targeted training to improve familiarity with GitHub Copilot.
• AI-driven code generation is producing more recommendations than engineers are adopting.
• Certain specialized teams are not experiencing substantial benefits from incorporating AI.
• Despite initial suspicions, the overall quality of the code has improved.

Artificial Intelligence in Software Engineering: Disparate Advantages at ANZ

The ANZ Banking Group embraced GitHub Copilot early on, utilizing the AI-driven coding assistant to support pair programming. After a successful initial trial, access was increased from 150 engineers to 3000. However, the advantages have not been consistently experienced by all team members.

ANZ’s Tim Hogarth.

Uneven Benefits Distribution

At the recent GitHub Galaxy24 event, Chief Technology Officer Tim Hogarth discussed the matter. Hogarth mentioned that although some engineers have rapidly embraced and gained advantages from GitHub Copilot, others are still acclimating to the tool. “We initiated the rollout last year, making it accessible right away to 3000 individuals,” he stated. “We’re promoting onboarding and tracking usage activity.”

Developing Skills to Generate Value

To tackle this gap, ANZ is providing specialized training for GitHub Copilot. “During the proof-of-concept, participants showed enthusiasm for the trial, but not everyone is prepared to adapt,” stated Hogarth. Extra coaching sessions are being offered to assist engineers in forming new habits and seamlessly incorporating AI into their routines.

Specialized Groups and Restricted Worth

Despite these attempts, certain specialized teams have not experienced substantial benefits from utilizing GitHub Copilot. “We need to investigate this further,” Hogarth remarked. “We are uncertain whether it’s due to the technology, the team, or the nature of the problem they aim to address.”

Suggestions for Code: More Possible Solutions Than Approved Ones

Remarkably, GitHub Copilot has produced approximately two and a half times more coding recommendations than what ANZ’s engineers have actually accepted. This challenges the idea that engineers would uncritically adopt solutions generated by AI. “There was a certain ‘mystique’ surrounding Generative AI, where people thought you could simply input your problem and immediately get the perfect answer,” Hogarth elaborated.

Improved Code Quality

Contrary to initial beliefs, the quality of code produced by ANZ has indeed enhanced with the adoption of GitHub Copilot. “We’re discovering that it’s actually superior,” Hogarth affirmed.

Summary

Although the ANZ Banking Group has adopted AI-driven coding tools like GitHub Copilot, the advantages have not been uniformly experienced across its engineering teams. Specialized training and coaching are being offered to assist more engineers in effectively incorporating AI into their processes. Certain specialized teams are still finding it challenging to realize the benefits, and the bank is actively investigating the reasons. In general, despite producing more recommendations than implemented solutions, AI has enhanced the quality of code output at ANZ.

Q: How does ANZ Banking Group implement AI-assisted pair programming?

A:

ANZ Banking Group integrated GitHub Copilot for AI pair programming and increased its deployment from an initial test group of 150 engineers to a total of 3000 engineers.

Q: What causes the advantages of GitHub Copilot to be distributed unevenly at ANZ?

A:

The advantages are not equally distributed since some engineers have greater familiarity with the tool than others. To enhance understanding and utilization, training and coaching sessions are being offered.

Q: In what ways is ANZ tackling the issue of the unequal distribution of benefits?

A:

The bank is providing specialized training and extra coaching sessions to assist engineers in more effectively incorporating GitHub Copilot into their workflows.

Q: Is every team at ANZ gaining the same advantages from using GitHub Copilot?

A:

No, certain specialized teams have not experienced substantial benefits from utilizing the tool. The bank is exploring whether this is attributable to technological challenges, team dynamics, or the specific nature of their issues.

Q: What is the difference between the number of code suggestions generated by GitHub Copilot and the number of suggestions actually accepted?

A:

GitHub Copilot produces approximately 2.5 times more code recommendations than the number that engineers at ANZ actually approve.

Has the quality of code produced at ANZ declined as a result of using AI-powered coding?

A:

The initial concerns that code quality might decline have proven to be untrue. On the contrary, the quality has actually enhanced with the implementation of GitHub Copilot.

“`html

Capgemini Enhances Digital Transformation in Aged Care with an $83.3 Million Investment

Quick Read

• Capgemini’s participation in the digital transformation of Aged Care has increased from $36.7 million to $83.3 million.
• The growth is mainly fueled by services related to Salesforce.
• New agreements feature a $9.7 million budget for user-centered design services.
• The Department of Health and Aged Care has been a major beneficiary of federal budget allocations for ICT infrastructure.

Introduction to Capgemini’s Enhanced Role

Capgemini’s contribution to the federal Aged Care digital transformation has increased substantially in just over a year, rising from $36.7 million to $83.3 million, mainly for services related to Salesforce. This notable increase highlights the Australian government’s dedication to upgrading its Aged Care digital infrastructure.

Original Agreement and Later Extensions

The company originally obtained a $36.7 million “work order” in May of the previous year to develop capabilities for delivering ICT infrastructure for the Aged Care system. In May of this year, they extended the contract for an additional year at the same amount of $36.7 million. Earlier this month, an additional contract worth $9.7 million was announced, making the total funding allocated to Capgemini $83.3 million.

Distribution of Assigned Funds

The majority of the funds, totaling $73.4 million, are allocated for the “development, support, and maintenance” of Salesforce and MuleSoft. An unspecified amount is set aside for the Salesforce-based technical infrastructure of the government provider management system (GPMS), which is intended to replace a 20-year-old system currently in use.

Concentrate on Salesforce and MuleSoft.

According to tender records, the value of the GPMS to Salesforce has risen from $13.5 million in February last year to $29.2 million. Additionally, Capgemini is supporting other applications of Salesforce and MuleSoft beyond just the GPMS.

User-Centred Design Services

The latest $9.7 million agreement with Capgemini is centered on a distinct set of tasks associated with “user-centred design services.” This initiative is intended to more effectively support work management and is consistent with the department’s goals to improve digital transformation in Aged Care.

Announcement from the Department of Health and Aged Care

A representative from the Department of Health and Aged Care mentioned that Capgemini is presently offering professional services to the aged care digital transformation initiative in two primary domains: the development, maintenance, and support of their Salesforce/MuleSoft platform, and the supply of design resources in collaboration with their business partners to outline requirements.

Federal Budget Allocations

For several consecutive years, the department has notably received significant federal budget allocations for “ICT infrastructure,” amounting to $312 million in Budget 2022, $214.5 million in Budget 2023, and $174.5 million in Budget 2024.

Suggestion from the Royal Commission

A Royal Commission on Aged Care Quality and Safety advised extensive modifications to IT systems within the industry and highlighted the importance of implementing digital technology to enhance the care and wellbeing of residents.

Summary

The participation of Capgemini in the federal Aged Care digital transformation has grown considerably due to an increased emphasis on Salesforce and MuleSoft services. New contracts aimed at user-centred design services enable Capgemini to remain a key player in updating Australia’s Aged Care digital framework. Substantial federal budget allocations given to the Department of Health and Aged Care are directed towards improving ICT infrastructure, in line with suggestions from the Royal Commission into Aged Care Quality and Safety.

What is the overall worth of Capgemini’s participation in the digital transformation of Aged Care?

The total commitment from Capgemini has increased to $83.3 million.

Q: What main services does Capgemini offer?

Capgemini primarily offers development, support, and maintenance services for Salesforce and MuleSoft platforms, in addition to user-centered design services.

What does GPMS stand for?

The Government Provider Management System (GPMS) is a Salesforce-based technical platform that modernizes a 20-year-old system used in Aged Care.

How much did the value of the GPMS contract rise?

A: The amount rose from $13.5 million in February of the previous year to $29.2 million.

Q: What are user-centered design services?

User-centered design services emphasize developing systems that fulfill user requirements by utilizing research, design, and repeated testing.

What federal budget provisions have been designated for ICT infrastructure in Aged Care?

Federal budget distributions encompass $312 million in Budget 2022, $214.5 million in Budget 2023, and $174.5 million in Budget 2024.

What were the recommendations of the Royal Commission?

The Royal Commission proposed comprehensive updates to IT systems in aged care, emphasizing the adoption of digital technology to enhance the care and wellbeing of residents.

Quantum Radiology Reclaims Most Patient Records After 2023 Cyber Attack

Quick Read

• Quantum Radiology restores primary IT systems after a cyber attack.
• Most patient records have been successfully restored.
• Current initiatives to recover historical scanned images.
• Notable enhancements in cybersecurity practices.

Incident Overview

Quantum Radiology, primarily a medical imaging service based in Sydney, was severely affected by a cyber attack late last year. The incident, occurring in November 2023, forced the company to shut down its clinics and cancel patient appointments because of compromised IT systems.

Recovery Efforts

In an announcement released on July 15, seven months following the initial incident notice, Quantum Radiology revealed that it had successfully decrypted its primary IT systems and carried out an analysis of data that might have been impacted. The company verified the retrieval of the majority of patient reports that were affected.

Ongoing Data Restoration

Although the main patient records have been obtained, Quantum Radiology is still in the process of recovering historical scanned images. This task is anticipated to require more time.

Cybersecurity Enhancements

Following the cyber attack, Quantum Radiology has implemented significant steps to enhance its IT and cybersecurity framework. These actions involve:

• Total overhaul of server infrastructure.
• Software upgrades.
• Enhanced security measures and cybersecurity awareness campaigns.
• A review of cybersecurity practices carried out independently.
• A dedication to continuous cybersecurity assessments.

Coordination with Authorities

The company has informed NSW and Commonwealth authorities, along with law enforcement agencies, about the recent progress in their recovery operations.

Summary

Quantum Radiology has achieved notable progress in recovering from the 2023 cyber attack that impacted its operations and exposed patient data. The organization has successfully decrypted its primary IT systems and retrieved the majority of patient records. Efforts to recover historical data are ongoing, and improved cybersecurity measures have been implemented to safeguard against future threats.

Why did Quantum Radiology shut down its clinics?

The cyber attack in November 2023 compelled Quantum Radiology to shut down its clinics and cancel patient appointments as their IT systems were compromised.

How much of the patient’s data has been retrieved?

Quantum Radiology has successfully restored its primary IT systems and retrieved most of the patient records.

Q: What measures are currently being implemented to restore historical scanned images?

The company is presently trying to retrieve historical scanned images, which might take a bit longer.

What cybersecurity precautions have been put in place following the incident?

Quantum Radiology has implemented various actions such as fully reconstructing the server infrastructure, updating software, enhancing security measures, conducting an independent review of cybersecurity practices, and pledging to maintain continuous cybersecurity assessments.

Have the authorities been notified regarding the recovery progress?

A: Yes, NSW and Commonwealth authorities, along with law enforcement agencies, have been informed of the recent progress in Quantum Radiology’s recovery initiatives.

For further details on this subject, please visit TechBest.

The Australian Electoral Commission Relocates to CDC Data Centres

Quick Read

• AEC secures an $8 million agreement with CDC Data Centres.
• The migration must be finished before the upcoming federal election.
• The contract is valid until 2034, with possible extensions up to 2036.
• Concentrate on confirming that IT systems are stable, secure, and prepared for elections.
• The move involves reducing on-site infrastructure.

The Transition Plan

The Australian Electoral Commission (AEC) is shifting its operations from NEXTDC facilities to CDC Data Centres, aiming to finish the migration before the forthcoming federal election. This transition is a component of a larger strategy to guarantee the security and reliability of election IT systems.

Contract Details

On July 2, 2023, the AEC entered into an $8 million agreement with CDC Data Centres. This contract spans a decade, running through to 2034, with possible extensions until 2036. Notably, this new contract overlaps by six months with the existing ten-year agreement with NEXTDC, which is scheduled to expire at the end of 2024.

Considerations for Timing and Election

The timing of this transition is critical. The Australian Electoral Commission’s (AEC) existing agreement with NEXTDC, located in Bruce, a suburb of Canberra, was scheduled to end on December 11, 2024. Since there is a possibility that the 2024/25 federal election might be announced in the latter half of 2024, the AEC had to finalize the migration by September 2024 to prevent substantial risks to IT operations during the election.

Guaranteeing Stability and Safety of the System

An AEC representative highlighted the significance of this shift to ensure secure, reliable, and ready-to-use IT systems for elections. CDC Data Centres secured the contract through a competitive bidding process managed by a panel put together by the Digital Transformation Agency.

Reducing Workforce and Investing in Cloud Services

The transition to CDC Data Centres offers the AEC a chance to reduce its on-site infrastructure. Currently, the data centre accommodates essential WAN infrastructure, internal business systems, and election delivery services. By shifting to CDC Data Centres, the AEC intends to enhance its cloud capabilities, thereby decreasing the need for physical data centre space.

Key Milestones

The AEC has established four main milestones for this transition, all of which must be achieved before October.

• Setting up the new CDC facility
• Creation of fundamental transport services
• Relocation of AEC infrastructure
• Carrying out assurance tasks for the 2024/25 federal election, including disaster recovery tests and high-availability failover procedures.

Updating Fundamental Voting Mechanisms

This shift is a component of a broader initiative by the AEC to update its fundamental election systems. In recent years, the commission has implemented major enhancements to ensure their systems can address modern requirements and obstacles.

Summary

The Australian Electoral Commission is shifting from NEXTDC facilities to CDC Data Centres in a strategic effort to guarantee secure and dependable IT systems for future elections. This $8 million contract highlights a wider initiative to modernize and reduce on-premises infrastructure while enhancing cloud capabilities. The migration is planned meticulously to prevent any disruptions before possible federal elections in 2024/25.

Q&A

Q: What is the reason behind the AEC transitioning from NEXTDC to CDC Data Centres?

A:

The initiative seeks to maintain the safety, stability, and security of the AEC’s IT systems in preparation for upcoming elections. Additionally, it provides a chance to reduce on-site infrastructure and focus on cloud investments.

Q: How much is the new contract worth and how long will it last?

A:

The AEC entered into an $8 million agreement with CDC Data Centres for a duration of 10 years, extending until 2034, with potential prolongations up to 2036.

Q: When will the transition be finished?

A:

The migration is scheduled to be finished before October 2024 to mitigate any risks related to the possible federal election in the latter half of 2024.

Q: What are the main steps in this transition?

A:

The main objectives consist of readying the new CDC facility, setting up essential carriage services, transitioning AEC infrastructure, and finalizing assurance tasks for the forthcoming federal election, which includes disaster recovery tests and high availability failovers.

Q: In what ways does this transition align with the AEC’s overarching strategy?

A:

This initiative is a component of a broader strategy by the AEC to update its primary election systems and ensure they align with current requirements and obstacles.

What particular infrastructure is planned to be housed at the new data center?

A:

The upcoming data centre will accommodate essential WAN infrastructure, internal business platforms, and election support services. This shift will also facilitate greater investments in cloud technologies.