The Cloudflare source code breach: Lessons learned

Cloudflare disclosed a November 2023 incident where attackers leveraged credentials leaked in an October Okta breach to pivot into Cloudflare's Atlassian environment and download 76 Bitbucket repositories; while Cloudflare reports no evidence of customer-data, network, or SSL key compromise, some repositories contained encrypted secrets that were immediately rotated and the company launched an internal 'Code Red' remediation to search for vulnerabilities and exposed secrets.