Cloudflare Hacked After State Actor Leverages Okta Breach

Cloudflare disclosed that attackers gained access to its Atlassian and source-code systems in November 2023 using stolen Okta service account credentials, accessing Confluence, Jira, and Bitbucket to view internal documentation about network architecture, security, and remediation procedures; Cloudflare says no customer data was affected, attributed the activity to a possible nation-state actor, and remediated by rotating thousands of credentials, reimaging systems, and hardening software.