Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Security Infrastructure

Dozens of Major Websites Crash All at Once

Dozens of major websites including Netflix, Uber and the BBC went down simultaneously on Thursday in some areas of the United States, but were soon up again in most cases.

Dozens of major websites including Netflix, Uber and the BBC went down simultaneously on Thursday in some areas of the United States, but were soon up again in most cases.

The cause of the crashes remained unclear, but some appeared connected to trouble at a cloud service relied on by companies, although that did not stop the social media rumor and conspiracy mill from going into overdrive.

“We’re aware that members are experiencing issues streaming on all devices,” streaming television service Netflix said in a tweet at its customer service Twitter account.

“We’re working to resolve the problem.”

Netflix spokesman Joris Evers told AFP that the outage was the result of “technical issues” at an UltraDNS cloud service provided by Neustar and affected mostly US subscribers.

“UltraDNS is working to address the issue,” Evers said. “We apologize for the inconvenience.”

Neustar confirmed in a tweet that there was an issue with its UltraDNS.

Internet trouble tracker CurrentlyDown.com displayed a list of two dozen websites that were or had been out of service during the day.

Advertisement. Scroll to continue reading.

The list also included Ameritrade — an online broker — and The Economist.

It was unclear whether all those affected relied on UltraDNS, but ride-sharing service Uber blamed its problems on that.

The outages sparked chatter at Twitter and other social networks.

“Netflix, HBOGo, Chase Bank, Uber, ETrade… all websites down at the same time,” tweeted Joseph Colarusso from the Twitter account @jcolarusso.

“Coincidence or Cyber Attack?”

Problems sporadic

The UltraDNS service was hit by an outage affecting customers in the eastern United States late afternoon local time, according to Neustar spokeswoman Lara Wyss.

“We can confirm this is not a DDoS attack,” Wyss told AFP, referring to a style of cyber attack in which websites are intentionally overloaded with requests for service and crash under the stress.

Most of the websites that stumbled or fell were back up and running by mid-evening East Coast time, according to CurrentlyDown.

“Some of our clients experienced sporadic difficulty accessing some of our websites,” Ameritrade told AFP.

“Once clients were able to log in there were no issues.”

Netflix also noted that the UltraDNS did not hurt the entire service, just some people trying to tune in.

Cloud-based DNS services essentially route traffic to websites.

“It’s kind of a road map,” said Silicon Valley analyst Rob Enderle of Enderle Group.

“The roads are still in place, but if the map goes away nobody knows where to go.”

– ‘Cascading catastrophe’ –

The economics of running large-scale online services, such as streaming television shows or summoning car rides using smartphone applications, has given rise to companies that work in the background to handle traffic, storage and other needs.

Such cloud service providers often compete on price, meaning compromises might be made when it comes to quality of hardware or even levels of security, according to Enderle.

Since datacenters or servers handle demands from multiple clients, a hardware failure or software glitch can knock out seemingly unrelated Internet operations.

“The problem with a cloud service is you can’t be certain a failure will be isolated,” Enderle said. “You’ve got this potential for cascading catastrophe.”

An outage at Amazon Web Services last month was blamed for causing problems at Netflix, Reddit and Tinder.

As with the trouble on Thursday, that problem caused a frenzy of worried commentary at social media venues.

Enderle warned that security breaches of cloud service defenses could also touch multiple websites relying on shared servers.

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Bill Dunnion has joined telecommunications giant Mitel as Chief Information Security Officer.

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

More People On The Move

Expert Insights

Related Content

Malware & Threats

The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently...

Management & Strategy

Hundreds of companies are showcasing their products and services this week at the 2023 edition of the RSA Conference in San Francisco.

Security Infrastructure

Security vendor consolidation is picking up steam with good reason. Everyone wants to improve security efficiency and effectiveness while paying for less.

Cloud Security

The term ‘zero trust’ is now used so much and so widely that it has almost lost its meaning.

Security Infrastructure

Instead of deploying new point products, CISOs should consider sourcing technologies from vendors that develop products designed to work together as part of a...

Funding/M&A

Responding to Cyber Threats Against Critical Infrastructures: Wired Business Media Acquires Long Running ICS Cybersecurity Conference Series

Security Infrastructure

Comcast jumps into the enterprise cybersecurity business, betting that its internal security tools and inventions can find traction in an expanding marketplace.

Audits

The PCI Security Standards Council (SSC), the organization that oversees the Payment Card Industry Data Security Standard (PCI DSS), this week announced the release...