Good question, usually they use PubSub methodology, cached content usually subscribe for changes from the original server. So if the servers get updated they are pushed to CDNs. If not caches get updated when you update profile picture. Using a push mechanism.