Nov 14, 2023
2 new incidents, 0 with updates.
Started
- ClosedHighNo fix needed
Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach
A suspected nation-state attacker used one access token and three service account credentials stolen in the October Okta breach, which Cloudflare had failed to rotate, to get into Cloudflare's Atlassian Confluence, Jira and Bitbucket. Cloudflare said customer data and systems were not affected.
Cloudflare internal Atlassian environmentClosed Feb 1, 2024
- ClosedHighPatched
Microsoft Windows: 3 exploited vulnerabilities (CVE-2023-36025, CVE-2023-36033, CVE-2023-36036)
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts. Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation. Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges. Added to CISA KEV on 2023-11-14.
Microsoft WindowsClosed Nov 14, 2023
