Cloudflare Falls Victim to Okta Breach, Atlassian Systems Cracked

Cloudflare disclosed that it was targeted in the Okta supply-chain campaign in late November, with attackers accessing internal Atlassian services (Confluence, Jira, Bitbucket) and an AWS instance to look for network configuration, secret rotation, and MFA-bypass information. The company, working with CrowdStrike, attributes the activity to a nation-state actor, found evidence of lateral movement and persistence, and reports that some documentation and limited source code were accessed but no customer data; Cloudflare rotated over 5,000 credentials and reimaged nearly 4,900 systems as remediation.