Breachpwn.watchFinancePublic sectorSME

    Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach

    Share

    Teaser from the source

    A suspected nation-state attacker used one access token and three service account credentials stolen in the October Okta breach, which Cloudflare had failed to rotate, to get into Cloudflare's Atlassian Confluence, Jira and Bitbucket. Cloudflare said customer data and systems were not affected.

    This is the RSS-feed teaser. Read the full article at the original source.

    Read at pwn.watch

    Source: https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion

    ID