Securing Non-Human Identities: Lessons from the Cloudflare Breach

Originally published by Oasis Security. Written by Roey Rozi, Director of Solutions Architecture, Oasis Security. Cloudflare disclosed on February 2nd that it had been breached by a suspected nation-state attacker. This breach exploited multiple unrotated and exposed secrets. The chain of events began with the Okta breach in October 2023, during which the attacker gained administrative access to Cloudflare’s Okta system. Although the Cloudflare team attempted to rotate all relevant credential...

architecture attacker breach breached cloudflare director events exploited exposed february human identities nation non non-human identities oasis october okta okta breach secrets security solutions state written