TLDR InfoSec · ATTACKS & VULNERABILITIES

CLOUDFLARE THANKSGIVING 2023 SECURITY INCIDENT

blog.cloudflare.com7 min read

Summary from the TLDR InfoSec newsletter

Cloudflare has provided an update on a breach from October 2023 when a threat actor accessed its internal systems using stolen Okta credentials. Not rotating the compromised tokens post-Okta breach enabled access to Cloudflare’s Atlassian suite. No Cloudflare customer data or systems were impacted by this event.