Cloudflare outage on November 18, 2025

-

 

What Happened

  • Cloudflare, a major internet infrastructure provider, experienced a global outage early Tuesday morning.
  • The issue began around 6:00 AM ET and caused widespread HTTP 500 errors, impacting Cloudflare’s Dashboard, API, and services that rely on its network.
  • Popular platforms like X (Twitter), ChatGPT, Spotify, Uber, Canva, League of Legends, and even Downdetector (which tracks outages) were affected. Some government and transit services also reported disruptions. [engadget.com], [pcmag.com], [securityweek.com]


  • Cloudflare confirmed the outage was not a cyberattack.
  • The root cause was a latent bug in its bot mitigation service, triggered by a routine configuration change. This bug cascaded into a broad network degradation, affecting multiple services globally. [pcmag.com], [securityweek.com], [techcrunch.com]
  • Initially, Cloudflare also observed an unusual traffic spike, which contributed to the errors, but the main culprit was the bug. [cnbc.com], [arstechnica.com]


  • Millions of users worldwide faced connectivity issues. Downdetector logged over 2.1 million outage reports globally, with 453,000+ from the U.S. alone. [pcmag.com]
  • Because Cloudflare powers about 20% of all websites, the outage disrupted a huge portion of the internet, including critical services and major brands. [cnet.com], [techstory.in]


  • Cloudflare implemented a fix around 9:50 AM ET, and most services began recovering soon after. However, some users continued to see intermittent errors as systems stabilized. [engadget.com], [economicti...atimes.com]
  • The company promised a full technical postmortem and said measures are underway to prevent similar incidents in the future. [techcrunch.com]


  • This outage highlights the internet’s dependency on a few infrastructure providers like Cloudflare, AWS, and Google Cloud. A single bug can ripple across the web, affecting millions.
  • Cloudflare’s CTO called the incident “unacceptable” and acknowledged the trust customers place in them, pledging improvements. [securityweek.com]

Popular posts from this blog

WSUS CVE-2025-59287 Mitigation

-
Image
CVE-2025-59287 is a critical Remote Code Execution (RCE) vulnerability affecting Windows Server Update Services (WSUS) . Here's a detailed breakdown of what it is, how it works, and what you should do about it: Overview Disclosed: October 2025 Patch Tuesday CVSS Score: 9.8 (Critical) Affected Systems: Windows Server 2012 through 2025 (including Server Core installations) Exploitability: Microsoft rates it as “Exploitation More Likely” Technical Details The vulnerability arises from unsafe deserialization of untrusted data in WSUS. Specifically, the GetCookie() endpoint in WSUS processes encrypted AuthorizationCookie objects without proper type validation. The deserialization occurs via .NET BinaryFormatter , which is known to be insecure when handling untrusted input. Attackers can send a crafted SOAP request to WSUS over port 8530 , containing a malicious AuthorizationCookie . The cookie is decrypted using a hardcoded AES key and then deserialized, allow...
Read more

Cloud Infrastructures are Having a Bad Week

-
Image
  Today’s disruptions across Microsoft Azure and Amazon Web Services (AWS) were significant, but they’re not signs of cloud computing’s demise. Instead, they underscore the risks of centralization and the importance of designing systems that can withstand provider-level failures. What happened today? • Microsoft Azure outage: Azure’s Front Door service suffered a major disruption due to a misconfiguration, impacting services like Outlook, Xbox, Microsoft 365, and even third-party platforms like Starbucks and Alaska Airlines. The Azure website states a little more than disruption. "Azure Front Door - Connectivity issues - Observing recovery Starting at approximately 16:00 UTC on 29 October 2025, customers and Microsoft services leveraging Azure Front Door (AFD) may have experienced latencies, timeouts, and errors. We have confirmed that an inadvertent configuration change was the trigger event for this issue. Affected Azure services may have included, but were not limited to: App S...
Read more

Best Alternatives to Windows 10

-
Image
  Don't throw out that old computer just yet, give that older model system a make over while keeping up with security and free application cross overs.  ðŸ§Đ Best for Windows Users (Easy Transition) These look and feel most like Windows. Zorin OS ðŸ–Ĩ️ Interface similar to Windows 10/11. 🧰 Preinstalled software (LibreOffice, browser, media player). 💊 Very stable (based on Ubuntu). ðŸŽŊ Great for general users, offices, and older hardware. Linux Mint (Cinnamon Edition) 🊟 UI is almost identical to Windows. 🧠 Simple learning curve, light on resources. 🔒 Secure and regularly updated. ðŸ’Ą Perfect for replacing Windows 10 on older PCs. Ubuntu (with GNOME or Mate Desktop) 🌍 One of the most popular and supported distros. 🛠️ Tons of community help and documentation. ðŸ“Ķ Easy software installation via “Ubuntu Software Center.” ⚡ For Performance and Old Computers Great if you want something faster than Windows 10. Lubuntu ðŸŠķ Lightweigh...
Read more