{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach · updates",
  "home_page_url": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion",
  "feed_url": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion/feed.json",
  "description": "A suspected nation-state attacker used one access token and three service account credentials stolen in the October Okta breach, which Cloudflare had failed to rotate, to get into Cloudflare's Atlassian Confluence, Jira and Bitbucket. Cloudflare said customer data and systems were not affected.",
  "language": "en",
  "_pwn": {
    "slug": "cloudflare-thanksgiving-2023-okta-token-intrusion",
    "severity": "high",
    "status": "closed",
    "patchStatus": "no-fix-needed",
    "rss": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion/feed.xml",
    "llms": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion/llms.txt",
    "json": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion#2024-02-01-f73eb97e",
      "url": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion#2024-02-01-f73eb97e",
      "title": "Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Cloudflare publishes its full write-up",
      "content_text": "Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Cloudflare publishes its full write-up\n\nSource: https://blog.cloudflare.com/thanksgiving-2023-security-incident",
      "date_published": "2024-02-01T00:00:00.000Z",
      "external_url": "https://blog.cloudflare.com/thanksgiving-2023-security-incident",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion#2023-11-23-7d3ad51e",
      "url": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion#2023-11-23-7d3ad51e",
      "title": "Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Cloudflare detects the attacker on its self-hosted Atlassian server",
      "content_text": "Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Cloudflare detects the attacker on its self-hosted Atlassian server\n\nSource: https://blog.cloudflare.com/thanksgiving-2023-security-incident",
      "date_published": "2023-11-23T00:00:00.000Z",
      "external_url": "https://blog.cloudflare.com/thanksgiving-2023-security-incident",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion#2023-11-14-0c6f2b20",
      "url": "https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion#2023-11-14-0c6f2b20",
      "title": "Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Attacker begins reconnaissance with credentials from the Okta compromise",
      "content_text": "Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Attacker begins reconnaissance with credentials from the Okta compromise\n\nSource: https://blog.cloudflare.com/thanksgiving-2023-security-incident",
      "date_published": "2023-11-14T00:00:00.000Z",
      "external_url": "https://blog.cloudflare.com/thanksgiving-2023-security-incident",
      "tags": [
        "high"
      ]
    }
  ]
}