TLDR InfoSec · ATTACKS & VULNERABILITIES
CLOUDFLARE THANKSGIVING 2023 SECURITY INCIDENT
Summary from the TLDR InfoSec newsletter
Cloudflare has provided an update on a breach from October 2023 when a threat actor accessed its internal systems using stolen Okta credentials. Not rotating the compromised tokens post-Okta breach enabled access to Cloudflare’s Atlassian suite. No Cloudflare customer data or systems were impacted by this event.