Technology

59589 readers

3300 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

Thanksgiving 2023 security incident (blog.cloudflare.com)

submitted 9 months ago by RedditEnjoyer@lemmy.world to c/technology@lemmy.world

3 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] eager_eagle@lemmy.world 23 points 9 months ago

tl;dr of the damage

no Cloudflare customer data or systems were impacted by this event. Because of our access controls, firewall rules, and use of hard security keys enforced using our own Zero Trust tools, the threat actor’s ability to move laterally was limited. [...] No services were implicated, and no changes were made to our global network systems or configuration.

The only production systems the threat actor could access using the stolen credentials was our Atlassian environment. Analyzing the wiki pages they accessed, bug database issues, and source code repositories, it appears they were looking for information about the architecture, security, and management of our global network; no doubt with an eye on gaining a deeper foothold.