Security
"We can confirm that the situation is under control" is not the world's greatest incident response report we've seen.
Incident forces huge hygiene effort, as Cloudflare rotates 5,000 credentials, triages 4,893 systems, reimages and reboots every machine after compromise.
"Threat actors have recently developed workarounds to current mitigations and detection methods and have been able to exploit weaknesses, move laterally, and escalate privileges without detection..."
"This actor is not doing the quiet intelligence collection and theft of secrets... they can disrupt major services if, and when, the order comes down,"
POCs validated, over 45,000 instances still publicly exposed after critical Jenkins vulnerability disclosed.