Cloudflare's server was hacked using a leaked access token. The attack occurred on a self-hosted Atlassian server and was carried out by a nation-state attacker. Cloudflare's security team quickly cut off the threat actor's access and no customer data or systems were impacted. The company failed to rotate some service tokens and service account credentials following a previous Okta compromise. The attacker was likely searching for information about Cloudflare's network architecture and security. Cloudflare took extensive measures to remediate the incident, including rotating all production credentials and strengthening controls. #cyberattack #cybersecurity #cybersecuritynews
Discussion
No replies yet.