topic Re: Cloudflare hacked using auth tokens stolen in Okta attack in Threats

Cloudflare hacked using auth tokens stolen in Okta attack

Kyaw_Myo_Oo — Sat, 03 Feb 2024 19:14:46 GMT

Dear all,

Cloudflare disclosed today that its internal Atlassian server was breached by a suspected 'nation state attacker' who accessed its Confluence wiki, Jira bug database, and Bitbucket source code management system.

The threat actor first gained access to Cloudflare's self-hosted Atlassian server on November 14 and then accessed the company's Confluence and Jira systems following a reconnaissance stage.

Cloudflare hacked using auth tokens stolen in Okta attack (bleepingcomputer.com)

Thanksgiving 2023 security incident (cloudflare.com)

Re: Cloudflare hacked using auth tokens stolen in Okta attack

Early_Adopter — Mon, 05 Feb 2024 10:11:22 GMT

Ooof.

I wonder if they had ensured removal of all secrets from that code repo(if not could be a really big breach).

Re: Cloudflare hacked using auth tokens stolen in Okta attack

Kyaw_Myo_Oo — Tue, 06 Feb 2024 01:45:08 GMT

Thanks for sharing your thoughts and view @Early_Adopter .