Dustin Decker

Cloudflare Penetration

For me, the story began back on November 2nd, 2023.
For the better part of twelve hours, I either couldn’t login at all, or received errors when attempting to manage DNS records.

I even opined:
“Authentication Error: Code 10000”
Please tell me this ain’t some Okta or similar sh*t.

(https://twitter.com/TheDustinDecker/status/1720087581575217338)

“The company says that this breach did not impact Cloudflare customer data or systems; its services, global network systems, or configuration were also unaffected.“

This is otherwise business as usual in our industry, the defining difference being Cloudflare was blessed enough to have this happen before the new SEC 8K filing requirements kicked in. Thus, hearing about it a full three months or more after the fact. What we should expect to change in our industry is a significant shortening of this cycle.

Dustin Decker

02/02/2024

Security Musings

Meet Dustin Decker, an accomplished information security research analyst with a wealth of expertise in daily cyber defense, incident response, intrusion detection, and network forensics.