Follow
Cloudflare Falls Victim to Okta Breach, Atlassian Systems Cracked
https://blog.cloudflare.com/thanksgiving-2023-security-incident
The cyberattackers, believed to be state sponsored, didn't get far into Cloudflare's global network, but not for lack of trying
Yet Another Okta Breach Victim
Nonetheless, the firm erred on the side of caution: "We undertook a comprehensive effort to rotate every production credential (more than 5,000 individual credentials), physically segment test and staging systems, performed forensic triages on 4,893 systems, reimaged and rebooted every machine in our global network including all the systems the threat actor accessed and all Atlassian products (Jira, Confluence, and Bitbucket)."
😎 👍🏽
@ecksmc
"Cloudflare worked with CrowdStrike and was able to determine that, after initial reconnaissance work, cyberattackers accessed its internal wiki (Confluence) and bug database (Jira) before establishing persistence on its Atlassian server. From there, the perpetrators poked around for places to pivot into, successfully puddle-hopping into the Cloudflare source code management system (Bitbucket) and an AWS instance."
Reconnaissance