Name: Crowdstrike 全球 IT 災難的幕後真相？為何世界依然如此脆弱 🎧 (Behind Crowdstrike's global IT meltdown and why the world remains vulnerable 🎧)
Uploaded: 2026-01-01T18:33:23.000Z
Duration: 27 min 42 s

Take a look at the impact for the indices.

Factual, succinct, all you need to know before your trading day starts.

事實、簡潔，在你開始交易前你需要知道的一切。

Subscribe to our newsletter CNBC's Daily Open welcome to beyond the Valley, a CNBC tech podcast with Arjun Karpil and Tom Chitty.

訂閱我們的電子報 CNBC 的每日開盤 歡迎來到「科技谷之外」，這是由 Arjun Karpil 和 Tom Chitty 主持的 CNBC 科技 Podcast。

Beyond the Valley Last week's IT failure made go down as the worst in history.

科技谷之外 上週的 IT 故障創下了史上最嚴重的紀錄。

Computers around the world began to grind to a halt on Thursday night after a faulty software update with a single defect saw severe disruption to air travel, hospitals, banks and much more.

週四晚間，全球電腦開始停擺，因為一個有缺陷的軟體更新，單一瑕疵嚴重擾亂了航空旅行、醫院、銀行等等。

This week we're going to explain how this happened and the subsequent fallout.

這週我們要解釋這件事是如何發生的，以及後續的影響。

We'll also hear Arjun's firsthand account of his day at CNBC's London offices and how CNBC managed to get on air.

我們也會聽聽 Arjun 在 CNBC 倫敦辦公室的親身經歷，以及 CNBC 如何成功播出。

And finally, what does this failure tell us about the vulnerable foundations on which today's economy is built?

最後，這次故障告訴我們，現今經濟建立在多麼脆弱的基礎上？

The Valley we had a quick chat on Friday lunchtime last week where you said, I think the words were, I've never known a day like it.

關於科技谷，我們上週五午餐時間快速聊了一下，你說，我記得你當時說：「我從沒遇過這樣的一天。」

So just to give our listeners an idea, kind of, how did the day start?

所以，為了讓聽眾有個概念，這一天大概是怎麼開始的？

As you mentioned, like a day unlike I've never experienced before in my career here as a reporter, as a journalist.

正如你所說，這是我身為記者、身為新聞工作者在這裡的職涯中，從未經歷過的一天。

And I was scheduled to sort of get in and talk about Netflix earnings.

而我原本的安排是要進來談 Netflix 的財報。

And what happened was overnight, firstly there was a.

接著發生的是，首先， overnight（隔夜）發生了。

We had heard about issues with Microsoft cloud service, but

我們聽說過 Microsoft 的雲端服務有些問題，但

before we were scheduled to go on air, people's sort of computers started to crash and there were questions over whether we would get onto air or not.

在我們預計要播出的時間之前，大家電腦開始當機，而且大家都在質疑我們到底能不能順利播出。

Anyways, it was all fine in the first hour of Squawkbox, our morning show, and

不管怎樣，我們早間節目 Squawkbox 的第一小時一切都還好，

And after I'd come off air sort of nearer to sort of 7:00am London time, I noticed that my computer had crashed and others too, and

接著在我離開直播差不多倫敦時間早上七點左右，我發現我的電腦當機了，別人的也是，

This was the first time mine had kind of crashed, others had earlier on, but

這是我的電腦第一次當機，其他人之前就發生了，但是

Anyways, these computers started then falling like dominoes at this point and the blue screen of death, as it's called, was appearing.

總之，這時候電腦開始像骨牌一樣一個個倒下，出現了所謂的「藍屏死機」。

But at this point we didn't really know what was causing it.

但這時候我們其實不知道是什麼原因造成的。

And I was sort of frantically running around the office trying to figure out what had happened at this point because you're in that unique position where you're being affected by this problem, but

我當時就在辦公室裡團團轉，試圖弄清楚到底發生了什麼事，因為你處在一個很特別的位置，你受到這個問題的影響，

you've also got to cover this problem as a journalist that covers tech.

但同時你身為一個科技記者，也必須報導這個問題。

So I mean, how we broke this story and we were actually one of the first in the world to break this story.

所以，我的意思是，我們是如何爆出這個新聞的，而且我們實際上是世界上最早爆出這個新聞的媒體之一。

But it came from an update issued by a company called CrowdStrike, which we're going to get into.

但這源於一家名為 CrowdStrike 的公司發布的更新，我們稍後會深入探討。

But the way we found that out, interestingly, was the fact that because it was affecting us, our IT departments globally had been speaking to CrowdStrike support.

但有趣的是，我們之所以發現這一點，是因為它影響了我們，我們全球的 IT 部門一直在與 CrowdStrike 的客服溝通。

And you know, we had got confirmation then from the company via our colleagues at NBC that this was indeed the reason for this global IT meltdown.

然後，透過我們在 NBC 的同事，我們從該公司那裡得到了確認，這確實是導致這次全球 IT 系統崩潰的原因。

And you know, from that moment, I think I ran on air, reported this news on CNBC.com, we got a headline out and the bare bones of information, which was very limited at the time we knew.

然後，我想我當時就上節目，在 CNBC.com 上報導了這個新聞，我們發布了標題，並提供了當時我們所知的非常有限的初步資訊。

從那時起，這個故事就越演越烈。

We're going to talk more about it, kind of who CrowdStrike are.

我們將進一步討論， CrowdStrike 到底是誰。

I think some people would probably never have heard of CrowdStrike.

我想有些人可能從未聽說過 CrowdStrike。

But before we do that for our listeners, if you haven't already, you can subscribe to the beyond the Valley weekly newsletter.

但在我們開始之前，對於我們的聽眾來說，如果你還沒有訂閱，可以訂閱 beyond the Valley 每週電子報。

Head to cnbc.com beyond the Valley, click on the subscribe button and you'll get a newsletter every Friday with all the best international tech stories from cnbc, including all the events of last week.

前往 cnbc.com beyond the Valley，點擊訂閱按鈕，你每週五都會收到一封電子報，裡面有 cnbc 最棒的國際科技新聞，包含上週的所有重要事件。

And if you want to contact Arjun and I or have a question about a past episode, then email us@BeyondTheValleyMBC.com I know this is a sort of crowbar episode because of what happened at the end of last week, but

如果你想聯繫 Arjun 和我，或對過去的節目有任何問題，請寄信到 us@BeyondTheValleyMBC.com。我知道這集有點像「硬塞」進來的，因為上週發生了一些事，但是

Weird to just do it on my own considering last few episodes I've been competing against someone far, far more intelligent than myself.

想到前幾集我還在跟一個比我聰明非常非常多的人比賽，現在卻要自己來，感覺有點怪怪的。

所以就來看看我、我會怎麼表現吧。

Okay, let's, let's get into the, into the bones of it.

好的，那我們就來深入探討一下。

So CrowdStrike are a cybersecurity company effectively.

CrowdStrike 基本上是一家資安公司。

And they us us based cybersecurity company that sells cybersecurity software aimed at businesses at the core.

他們是一家總部位於美國的資安公司，主要向企業銷售資安軟體。

And their owner is a, is a billionaire, George Kurtz.

他們的創辦人是一位億萬富翁，名叫 George Kurtz。

And the company is worth billions of dollars.

So this isn't just some small, you know, firm.

所以這不是什麼小公司，你知道的。

This is a firm that, you know, supports the, the security of Microsoft and, and

the security of organizations across the world.

That's, that's the more important part the equation is that it's not a small firm.

這才是方程式裡比較重要的部分，它不是一家小公司。

Lots and lots and lots of global businesses rely on CrowdStrike for their security.

非常非常多的全球企業都依賴 CrowdStrike 來確保安全。

And that's why this whole episode was quite a big ordeal and why it was so widespread.

這也是為什麼整件事情這麼大條，而且傳播得這麼廣。

There was also something that happened before the CrowdStrike thing, right.

在 CrowdStrike 事件之前，也發生了另一件事，對吧？

So the timeline is quite important, I think.

So I got into the office Friday morning, London time, overnight our time, so late us Microsoft had issued an update saying that their Azure cloud services were facing some problems and that there could be disruption to certain Microsoft cloud based apps, you know, like teams, for example.

所以我週五早上到辦公室，倫敦時間，我們這邊是隔夜，所以是美國時間的晚上，微軟發布了更新，說他們的 Azure 雲端服務遇到了一些問題，而且可能會影響到某些基於雲端的微軟應用程式，像是 Teams。

So is that what you were talking about when you had your first kind of update that you needed to do?

所以這就是你說的，你第一次需要更新的時候嗎？

But when you first came into the office, what we found out later was that was completely wholly unrelated to what followed with CrowdStrike, which then probably confused countless of IT managers, engineers, you know, when, when this was happening because they're probably thinking, oh, it must be related to, to the update we did earlier, right?

但你一開始進辦公室時，我們後來才發現，那跟後來發生的 CrowdStrike 事件完全沒有關係，這大概讓無數的 IT 管理員和工程師感到困惑，你知道嗎，當這件事發生時，他們可能在想，哦，這一定跟我們之前做的更新有關，對吧？

So they, they, you know, there were questions over whether this was a Microsoft.

所以他們，他們，你知道，有人質疑這是不是微軟的問題。

I had first seen that and thought it was a Microsoft issue, the reason why Windows crashed on my PC.

我一開始看到時，以為是微軟的問題，因為我的電腦 Windows 當機了。

But then as we started to get more information, we found out it was to do with CrowdStrike.

但後來我們收到更多資訊，才發現是跟 CrowdStrike 有關。

And this specific issue was this CrowdStrike software called Falcon.

而這個特定的問題，就是 CrowdStrike 這套叫做 Falcon 的軟體。

This is what they call an endpoint monitoring product.

這就是他們所謂的端點監控產品。

So it's effectively a piece of software designed to protect what they call endpoints.

所以它基本上就是一套軟體，用來保護他們稱之為「端點」的裝置。

It's a jargony term in the cybersecurity industry.

這是資安產業裡一個比較術語化的說法。

Basically means your laptop means your PC, means smartphone means something, an end device, the recipient at the end of the line in the process of creating, it's that device at the end of the line.

基本上就是你的筆記型電腦、你的 PC、你的智慧型手機，就是一個終端裝置，在整個建立過程中，處於線路末端的接收者，就是那個線路末端的裝置。

So it's designed to protect PCs, laptops, etc.

所以它是用來保護 PC、筆記型電腦等等的。

this is normal for cybersecurity firms is they have to issue updates very often because the cybersecurity landscape and the threats are constantly changing.

這對資安公司來說很正常，因為資安的環境和威脅不斷在變，所以他們必須非常頻繁地發布更新。

The different ways hackers might attempt to exploit vulnerabilities in machines, etc.

駭客可能試圖利用機器漏洞等等的不同方式。

So they have to update regularly the patches and the defense against these kind of new vectors of attack.

所以他們必須定期更新這些補丁，以及針對這些新型攻擊手法來加強防禦。

And therefore a mundane update they issued which was to roll out across their customers globally is what they did.

所以他們發布了一個普通的更新，這個更新要推送到全球的客戶。

Now these are, you know, if you've got a smartphone, your smartphone sometimes automatically updates overnight, right.

現在這些，你知道，如果你有智慧型手機，你的手機有時候會在半夜自動更新，對吧。

This is very similar to what happened there.

這跟那時候發生的事非常相似。

It was, it was almost an automatic scheduled update that was due to come in.

這幾乎是一個預定的自動更新，本來就要進來了。

The problem was the fact that the company CrowdStrike has to constantly update its offering is also where the weakness stems from.

問題在於 CrowdStrike 這家公司必須不斷更新他們的產品，這也是弱點的來源。

And they issued an update that had buggy code in it, effectively defective code.

他們發布了一個有錯誤程式碼的更新，基本上是有缺陷的程式碼。

This cyber security software are quite special because they're trying to protect an organization's entire infrastructure.

這些網路安全軟體很特別，因為它們試圖保護組織的整個基礎架構。

They need deep access into the, the kernel, the kernel.

它們需要深入存取核心、核心。