InfoSecBulletin Cybersecurity for mankind
Cloudflare suffered an incident roughly 3.5 hours On November 14, 2024 impacting the majority of customers using Cloudflare Logs. Cloudflare lost about 55% of the logs normally send to customers were not sent and were lost on that incident.
Log services are crucial for network operations, helping businesses analyze traffic, troubleshoot issues, and detect threats. Cloudflare’s log service uses a tool called Logpush to process and deliver large amounts of data to customers.
New Windows Defender ‘RoguePlanet’ zero-day grants SYSTEM privileges
Microsoft June Patches 200 Vulnerabilities including 3 zero days
World’s first wind power underwater data center is now live
VMware Fixed Multiple Flaws Allow Attackers to Inject Malicious Scripts
CVE-2026-50751
Check Point VPN 0-day Flaw Exploited in the Wild
AI-designed First ‘universal vaccine’ tested in humans
China Unveils First Prefabricated Data Center Base, Reducing Construction Time by 70%
Hacker now exploits recently patched SolarWinds Serv-U flaw
Cisco SD-WAN Flaw Exploited and Trend Micro Flaws Allows to Security Bypass
Ransomware Crisis Deepens: 4,089 Victims Hit Across 121 Countries in 2026
On November 14th, a Logpush update caused a significant error. Cloudflare’s incident report revealed that the update did not direct auxiliary tools to send the collected logs. Consequently, the logs were collected but never delivered and were eventually lost when the cache was cleared.
“A misconfiguration in one part of the system caused a cascading overload in another part of the system, which was itself misconfigured. Had it been properly configured, it could have prevented the loss of logs,” Cloudflare stated in their report.
Engineers team quickly found the flaw and reverted the update, but this caused a cascading failure. The system became overwhelmed with excessive log data, including from users who hadn’t set up Logpush, worsening the problem.
Cloudflare has apologized for the loss of user data and is implementing measures to prevent future incidents, though efforts are still underway.
The loss of important log data highlights the need for thorough testing and backup measures to maintain the integrity and availability of crucial information.
