ClosedHighNo fix needed
Day · Feb 1, 2024
Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach
Cloudflare internal Atlassian environment
Updates on Feb 1, 2024
Cloudflare publishes its full write-up
Source
Summary
A suspected nation-state attacker used one access token and three service account credentials stolen in the October Okta breach, which Cloudflare had failed to rotate, to get into Cloudflare's Atlassian Confluence, Jira and Bitbucket. Cloudflare said customer data and systems were not affected.
Read the full incident →
