The Cloudflare Outage May Be a Security Roadmap
Summary: An intermittent Cloudflare outage beginning around 6:30 EST/11:30 UTC on Nov. 18 knocked many top internet destinations offline for several hours, and some customers who pivoted their domains away from Cloudflare during the disruption may have exposed infrastructure normally shielded by its web application firewall. Cloudflare's postmortem attributed the disruption to a database permissions change that caused its Bot Management feature file to double in size and propagate across its network, not to a cyberattack, and the company estimates roughly 20 percent of websites use its services.
What you should know: IANS Research's Aaron Turner describes an eight-hour window in which high-profile sites bypassed Cloudflare, and warns that any organization that made that decision needs to check exposed infrastructure for an attacker still persisting after protections were switched back on.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026