--- title: "Friday Buzz: Cloudflare’s Massive Bug" id: "37084" type: "post" slug: "friday-buzz-cloudflares-massive-bug" published_at: "2017-02-24T21:05:44+00:00" modified_at: "2026-03-16T18:43:18+00:00" url: "https://associationsnow.com/2017/02/24/friday-buzz-cloudflares-massive-bug/" markdown_url: "https://associationsnow.com/2017/02/24/friday-buzz-cloudflares-massive-bug.md" excerpt: "The widely used content delivery platform is working with Google employees to plug a leak that may have affected sensitive information involving numerous users. Also: A phone call that fills any association employee with dread." taxonomy_category: - "Marketing / Communications" taxonomy_post_tag: - "AssociationsNow" - "cloudflare" - "cybersecurity" - "Data Breach" - "Technology" taxonomy_content_format: - "Article" taxonomy_role: - "Association CEO / Executive Director" - "C-Level" - "Executive Team" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » Friday Buzz: Cloudflare’s Massive Bug If you’ve used a website over the last six months—good chance of that, probably—you may want to change your passwords today. That’s because of a major new bug involving a fundamental service used by millions of websites. Late last night, the widely used content security platform Cloudflare revealed that it had been subject to a memory leak issue related to its parser. The leak affected both secure and nonsecure sites—meaning that sites that asked for your passwords or credit card information might have been exposed. “The bug was serious because the leaked memory could contain private information and because it had been cached by search engines,” [the company stated on its website (opens in a new tab)](https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/) . “We have also not discovered any evidence of malicious exploits of the bug or other reports of its existence.” The number of requests directly affected by this issue was very small—about 1 in every 3.3 million HTTP requests at its peak, according to the company—but due to Cloudflare’s use on millions of popular sites, the scale means that a lot of people were affected anyway. Tavis Ormandy, a Google engineer who uncovered the bug, wrote on a forum thread that it was one of the most alarming security issues he had ever run into. “I’m finding private messages from major dating sites, full messages from a well-known chat service, online password manager data, frames from adult video sites, hotel bookings,” [Ormandy wrote (opens in a new tab)](https://bugs.chromium.org/p/project-zero/issues/detail?id=1139) . “We’re talking full HTTPS requests, client IP addresses, full responses, cookies, passwords, keys, data, everything.” Both Google and Cloudflare are working around the clock to clean up the issue. ### A Feeling of Horror > You finally get rid of that e-newsletter no one ever reads, when — surprise! “A Member Called Today”[https://t.co/x8sXftvI6E (opens in a new tab)](https://t.co/x8sXftvI6E) > [#assnchat (opens in a new tab)](https://twitter.com/hashtag/assnchat?src=hash&ref_src=twsrc%5Etfw) > [pic.twitter.com/ZlK1uM0WfH (opens in a new tab)](https://t.co/ZlK1uM0WfH) > > — Abner Gonsalves, CAE (@AbnerGonsalves) [February 24, 2017 (opens in a new tab)](https://twitter.com/AbnerGonsalves/status/835123944093069312?ref_src=twsrc%5Etfw) **Abner Gonsalves, CAE, the partner relationship manager** at Health eCareers, has a fun little post about the feeling of dread that comes with a certain part of the association management experience—[when members call you up (opens in a new tab)](http://resources.healthecareers.com/blog/stop-everything-a-member-called-today) . “[F]or whatever reason, people still love to pick up the phone and call nonprofits. In real time,” he writes. “What is this, 1988? And the dreaded ‘A Member Called Today’ message can totally derail an entire nonprofit organization.” If you feel that sense of dread, [Gonsalves’ GIF-heavy post (opens in a new tab)](http://resources.healthecareers.com/blog/stop-everything-a-member-called-today) will help you at least find the humor in it. ### Other Links of Note **What’s coming up in the association world next week?** Deirdre Reid’s always -handy [Association Brain Food guide of upcoming webinars (opens in a new tab)](https://deirdrereid.com/2017/02/24/association-brain-food-weekly-2-24-17/) should keep you busy. **Burnout is a serious issue for nonprofit leaders.** At the Wild Apricot blog, [read up on a few ideas (opens in a new tab)](http://www.wildapricot.com/blogs/newsblog/2017/01/24/seven-ways-top-nonprofit-leaders-avoid-burnout) to keep the burnout problem at bay. **Quote of the day:** “The most useful mindset is to approach each offering like it is the first time you are launching it,” [says Amanda Kaiser of Smooth the Path (opens in a new tab)](http://www.smooththepath.net/2017/02/23/keeping-heart-part-associations-repetitive-offerings/) . (Cloudflare logo) [Ernie Smith](https://associationsnow.com/author/ernie-smith/) Ernie Smith is a former senior editor for Associations Now. [More articles by this author](https://associationsnow.com/author/ernie-smith/) Tags: [#cloudflare](https://associationsnow.com/tag/cloudflare/) [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#Data Breach](https://associationsnow.com/tag/data-breach/) [#Technology](https://associationsnow.com/tag/technology/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [PodcastAssociations NOW Presents: More Than Marketing: The Power of Strategic CommunicationsJuly 30, 2026](https://associationsnow.com/2026/07/30/associations-now-presents-more-than-marketing-the-power-of-strategic-communications/) - [PodcastAssociations NOW Presents: Why Slower Marketing Can Drive Stronger Member Engagement (Episode 27)June 25, 2026](https://associationsnow.com/2026/06/25/associations-now-presents-why-slower-marketing-can-drive-stronger-member-engagement-episode-27/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2017%2F02%2F24%2Ffriday-buzz-cloudflares-massive-bug%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !