Cloudflare hacked using auth tokens stolen in Okta attack

[Kyaw_Myo_Oo]

Dear all,

Cloudflare disclosed today that its internal Atlassian server was breached by a suspected 'nation state attacker' who accessed its Confluence wiki, Jira bug database, and Bitbucket source code management system.

The threat actor first gained access to Cloudflare's self-hosted Atlassian server on November 14 and then accessed the company's Confluence and Jira systems following a reconnaissance stage.

Cloudflare hacked using auth tokens stolen in Okta attack (bleepingcomputer.com)

Thanksgiving 2023 security incident (cloudflare.com)

[Early_Adopter]

Ooof.

I wonder if they had ensured removal of all secrets from that code repo(if not could be a really big breach).

[Kyaw_Myo_Oo]

Thanks for sharing your thoughts and view @Early_Adopter .