ClosedHighNo fix needed
Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach
Cloudflare internal Atlassian environment
A suspected nation-state attacker used one access token and three service account credentials stolen in the October Okta breach, which Cloudflare had failed to rotate, to get into Cloudflare's Atlassian Confluence, Jira and Bitbucket. Cloudflare said customer data and systems were not affected.
Why this severity: Nation-state intrusion using unrotated credentials
- Started
- Nov 14, 2023
- Closed
- Feb 1, 2024
Affected
Not published yet
Fixed in
No fixed release yet
Updates by day3
Notes & caveats
Related: okta-support-system-breach-2023.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
