Two Blackouts in Two Days Raise Questions About China Espionage and Infrastructure Security

Thousands of flights were delayed or cancelled, travelers were stranded, and Microsoft outages threatened NHS prescriptions and locked out many users from email and services.
You cannot rule out what you cannot yet explain.
The column faults Microsoft for declaring the outage non-malicious before it had identified the cause.
Mark

Why does this column matter if it can't say what caused either outage?

Mimi

Because the explanations so far have been thin. Microsoft shifted its story several times, and officials on the FAA stop offered only a 'communication issue' across all 22 centers.

Luke

Careful, though. Microsoft did eventually name a cause, a flaw in a network capacity upgrade, and said it was not related to cyber. The column doubts that, but it offers no evidence of an attack.

Mark

So the China link is what, exactly?

Mimi

Timing. Huang's resignation on Thursday morning, the Microsoft outage within hours, the ground stop a day later.

Luke

Timing is the whole argument. The author even admits he may be too conspiratorial. The historical list of Chinese disruptions is context, not proof about this week.

Mark

What is solid, then?

Mimi

The numbers: 10,243 delayed and 3,234 canceled flights at four hours, 74 countries hit by Microsoft, and the staff departures at the FBI and CISA.

Luke

Those are the column's figures, and the staff and spending numbers are attributed partly to commentators. I'd want the cause of the ground stop confirmed before drawing any conclusion.

Mark

And what's the fair takeaway?

Mimi

That vulnerability is real, Volt Typhoon is documented by agencies, and the public has not been told why the planes stopped.

  • At 3:54 p.m. Eastern, the entire country's departing flights froze in place, and airports began sending stranded travelers home with warnings of hours or days of delay.
  • The day before, Microsoft's Outlook, Teams and Copilot went dark in 74 countries, with inboxes locked and the U.S. House, a federal appeals court, Britain's NHS and Australian spy agencies all struggling to communicate.
  • Microsoft's explanations shifted from no sign of malice to elevated load to a rolled-back network change, and only Friday afternoon did it name a capacity-upgrade flaw.
  • Officials have offered few details on the aviation failure, and the columnist argues that the absence of clear answers, amid cuts to FBI and CISA staff, is itself the danger.
  • The outages land just as a Nvidia chief's resignation over alleged Chinese ties dominates Washington, though no evidence links the failures to Beijing, and the investigation remains unresolved.

On a Friday afternoon in mid-November, the American sky was quieted when the Federal Aviation Administration halted every departing flight across the country after a communication fault struck twenty-two air traffic centers, only the third such stop in the nation's history. The day before, Microsoft's messaging and collaboration tools faltered across seventy-four countries, and the company eventually traced its failure to a flaw introduced during a network upgrade, though not, it insisted, a cyber event. Both episodes arrived in the shadow of a week of China-related headlines, and a Fortune columnist has used that shadow to ask a question the public has not yet been answered: when the systems that carry us stumble, do we truly know why? The author's unease rests less on a proven attack than on the quiet gap between what officials say and what they can yet explain.

At 3:54 on Friday afternoon, November 13, the Federal Aviation Administration stopped every departing flight in the United States. It cited extraordinary circumstances and safety, and it was only the third nationwide ground stop ever ordered. Transportation Secretary Sean Duffy said only that a communication issue had struck all 22 centers that guide planes across the country and that technicians were investigating. A later press conference by Homeland Security Secretary Markwayne Mullin offered no answers about the cause and little assurance of a quick fix. Airports were telling travelers to go home, and cancellations were expected to last many hours, possibly days. By the four-hour mark, more than ten thousand flights had been delayed and over three thousand canceled.

The day before, Microsoft's Outlook, Teams and Copilot had failed across seventy-four countries for hours. Within an hour of the outage beginning, Outlook complaints ran at more than two thousand times normal. The U.S. House was largely incapacitated, a federal appeals court could not send or receive email, Britain's Parliament and National Health Service were hit with prescriptions threatened, and Australia's spy agency went offline. Microsoft's explanations shifted through the day, from no sign of malicious activity to elevated load to a rolled-back network change. Only on Friday afternoon did it name a flaw introduced during a network capacity upgrade, which it said was not related to cyber. The columnist's point is simple: you cannot rule out what you cannot yet explain.

The author then places these events beside a week of China-related news. On Thursday, Nvidia announced the resignation of Jensen Huang, the chip industry's leading advocate for selling to China, after he admitted an affair with a businesswoman U.S. officials suspect of spying for Beijing. Beijing called it a smear. The author concedes he may be too conspiratorial, and he offers no evidence tying this week's outages to China. He does list past disruptions he reads as a pattern, and he recalls Beijing-linked hackers reaching State Department email and U.S. agencies describing Chinese intrusions into American infrastructure.

The column closes on capacity. Since Trump returned to office, more than 1,500 FBI special agents and nearly 1,000 CISA staffers have left, about a third of the agency's workforce. Whether these outages were an attack or aging systems failing, the author argues, the public is owed clearer answers than it has received. For the ground stop, officials have not yet given one.

At 3:54 p.m. Eastern on Friday, November 13, the Federal Aviation Administration stopped every departing flight in the United States, citing extraordinary circumstances and safety. It was only the third nationwide ground stop ever ordered. The first came on September 11, 2001, and the second on January 11, 2023. This account comes from a Fortune opinion column by Jeffrey Sonnenfeld's byline outlet, and it argues as much as it reports, so what follows separates the two.

Transportation Secretary Sean Duffy said only that a communication issue had hit all 22 centers that guide planes across the country, and that technicians were investigating. A later press conference by Homeland Security Secretary Markwayne Mullin, the column says, offered no answers about the cause and little assurance of a quick fix. Airports were sending travelers home and warning that cancellations would last many hours, possibly days.

The scale was large. The 2023 ground stop lasted about 90 minutes and still delayed more than 10,000 flights and canceled 1,300. Four hours into Friday's, 10,243 flights were delayed and 3,234 canceled, with the halt covering the whole country rather than individual airports.

The day before, Microsoft's Outlook, Teams and Copilot failed in 74 countries for hours. The outage began at 11:17 a.m. Eastern Thursday and reached 19 Microsoft 365 services. Within an hour, Outlook complaints ran at more than 2,000 times normal. Microsoft has over 450 million paid commercial seats, and many millions of users were locked out. The column lists the effects: the U.S. House of Representatives was largely incapacitated, a federal appeals court could not send or receive email, Britain's Parliament and National Health Service were hit, with patients' prescriptions threatened, and Australia's spy agency and federal police went offline. For scale, the author notes that the 2024 CrowdStrike update crash, which hit 8.5 million machines, cost the Fortune 500 an estimated $5.4 billion, and that one risk adviser already puts Microsoft's bill in the billions for Australia alone.

The author's sharpest criticism is of Microsoft's explanations. For a full day the company said there was no indication of malicious activity, while its own bulletins showed it did not know what had broken. It blamed elevated load, then servers that unexpectedly dropped out, and said it found no recent change matching the failure. Hours later it was rolling back a network change. Early Friday, engineers were still trying to pinpoint the cause of the traffic influx. Only Friday afternoon did Microsoft name a flaw introduced during a network capacity upgrade, which it said was not related to cyber. The author's point: you cannot rule out what you cannot yet explain.

Then comes the timing argument. On Thursday morning Nvidia announced the resignation of Jensen Huang, the chip industry's loudest advocate for selling to China, after he admitted an affair with a businesswoman U.S. officials suspect of spying for Beijing. Beijing has called it a smear. Lawmakers in both parties are demanding testimony and tighter export controls. Within three hours, the column says, inboxes went dark from Capitol Hill to Canberra. The author concedes he may be too conspiratorial, but lists past incidents he reads as a Chinese pattern of drowning out bad news with disruption: Change.org in 2011, Bloomberg and The New York Times in 2012, Hong Kong targets in 2014, GitHub in 2015, Telegram and LIHKG in 2019, and Twitter in 2022. He offers no evidence connecting this week's outages to China.

He adds history on Microsoft: Beijing-linked hackers went through customers' Exchange servers in 2021 and took some 60,000 State Department emails in 2023, a breach a federal review board blamed on a cascade of security failures at the company. Three weeks ago Microsoft said a China-aligned group used AI agents against more than 2,250 Microsoft 365 customers. U.S. agencies say China's Volt Typhoon hackers have sat in American communications, transportation, energy and water networks, sometimes for five years, including over 300 days in one small Massachusetts utility.

The column closes on capacity. More than 1,500 FBI special agents and nearly 1,000 CISA staffers, about a third of its workforce, have left since Trump returned to office. Commentators note this followed $1 trillion in Pentagon spending, while the needed aviation upgrades would have cost $40 billion. Whether either outage was an attack or aging systems failing, the author says, the public is owed clearer answers than it has received. Officials have not yet given one for the ground stop.

A communication issue struck all 22 centers guiding planes across the country.
— Transportation Secretary Sean Duffy
The flaw came from a network capacity upgrade and was 'not related to cyber.'
— Microsoft
Quieres la nota completa? Lee el original en Fortune ↗
Contáctanos FAQ