Skip to content
Cloudflare outage raises alarm over centralised internet risks

Cloudflare outage raises alarm over centralised internet risks

Securitybrief [email protected] (Shannon Williams) November 20, 2025

A recent outage involving Cloudflare has exposed the vulnerabilities and far-reaching effects that arise from the concentration of internet infrastructure among a handful of major providers. Several industry leaders have issued warnings the systemic risks and operational challenges tied to the increasing dependence on these platforms.

Critical internet infrastructure has become increasingly centralised, creating situations where a single operational incident can have sweeping impact. Tony O'Sullivan, Chief Executive Officer, RETN, said:

O'Sullivan highlighted that the focus on mitigating persistent threats, such as distributed denial-of-service (DDoS) attacks, has led to widespread adoption of application-layer proxy services from major providers like Cloudflare. These solutions protect individual websites but also introduce new systemic risks.

Widespread disruption

Douglas Wadkins, Chief Technology Officer of Opengear, pointed to the immediate and severe consequences of disruptions to such large-scale services.

Wadkins noted that businesses experience lost revenue, damaged consumer trust and extensive operational disruption even if outages last only a few minutes.

Automation challenges

Automation, while increasingly prevalent, also brings new vulnerabilities if incorrectly managed. Wadkins said:

He also pointed out that common errors in automation processes - such as neglecting canary and blast radius checks - can exacerbate the impact of faults when large segments of the infrastructure depend on a single provider.

Manual or slow recovery processes following outages can mean resolution is protracted, with technical teams often struggling to identify and remediate faults in a timely manner. Wadkins explained:

Resilience strategies

O'Sullivan advocates for more robust, multi-layered defensive strategies, moving beyond a dependence on a single provider.

Operational preparedness

Wadkins called attention to the importance of independent and rapid access to management systems during incidents to minimise disruption. Outages can quickly escalate with broad consequences for economic activity and digital communication.

He said: "The ability to access systems remotely, isolate the cause and remediate quickly is what stops a single point of failure from spiralling into a widespread outage. In our hyper-connected world, where global supply chains and digital networks are deeply intertwined, even brief disruptions can have far-reaching economic, operational, and geopolitical consequences in an already fragile climate."

Extracted Entities

Attack Types (1)