US cybersecurity firm SentinelOne revealed over the weekend that a software bug caused a seven-hour outage on Thursday.
See also: Cellcom: Service outage due to cyberattack
This widespread outage affected many customer-facing services, in an incident that SentinelOne described as a “global service outage.”
The company acknowledged the outage in a post on Thursday, reassuring customers that their systems were still protected. In an analysis published two days later, SentinelOne confirmed that the cause of the incident was not a cyberattack or security breach, but a software error in an infrastructure control system that automatically deleted critical network routes and DNS resolver rules, causing most services to be down across all regions.
Services were halted when the necessary connection network became accessible, as an error in cloud management led to the restoration of an empty backup of the AWS Transit Gateway.
See also: Spain's telecom companies face outages
As a result of this outage, programmatic access to the company's services was also disrupted, while Unified Asset Management/Inventory and Identity services were also taken offline, preventing customers from seeing vulnerabilities or accessing identity consoles.
The company added that the outage may have also affected data receipt from various third-party services, as well as alerts from Managed Detection and Response (MDR).
SentinelOne emphasizes that endpoints remained protected, although security teams were unable to log into the SentinelOne management console, access data, or manage its services.
See also: PlayStation Network outage: Sony compensates PlayStation Plus subscribers
The SentinelOne incident highlights a critical truth in cybersecurity: even the most sophisticated platforms can experience problems due to internal technical errors, not necessarily external attacks. This particular outage, caused by a bug in the cloud infrastructure, had a significant impact on the platform’s functionality, preventing access to key tools such as Unified Asset Management and identity consoles.
Source: bleepingcomputer
