Two critical flaws in the engine behind roughly three-quarters of identifiable websites forced governments, hospitals and some financial services offline. I set out what happened, what is and is not known about banking, what the law says, and why the episode matters for international security.