Kompania Cloudflare, e cila ofron nj\u00eb rrjet shp\u00ebrndarjeje t\u00eb p\u00ebrmbajtjes dhe sh\u00ebrben rreth 20% t\u00eb trafikut t\u00eb internetit, publikoi nj\u00eb raport mbi thyerjen e nj\u00eb nga server\u00ebt e saj, ku funksiononte nj\u00eb wiki brenda e bazuar n\u00eb platform\u00ebn Atlassian Confluence, nj\u00eb sistem p\u00ebr gjurmimin e gabimeve Atlassian Jira dhe nj\u00eb sistem t\u00eb menaxhimit t\u00eb kodit Bitbucket. Analiza tregoi se sulmuesi arriti t\u00eb fitonte qasje n\u00eb server duke shfryt\u00ebzuar tokenat q\u00eb u mor\u00ebn nga thyerja e kompanis\u00eb Okta n\u00eb tetor, e cila \u00e7oi n\u00eb nd\u00ebrrimin e token\u00ebve t\u00eb qasjes. <\/p>\n
Pas shpalljes s\u00eb informacionit p\u00ebr thyerjen e Okta n\u00eb vjesht\u00eb, kompania Cloudflare nisi procesin e p\u00ebrdit\u00ebsimit t\u00eb kredencialeve, \u00e7el\u00ebsave dhe token\u00ebve t\u00eb p\u00ebrdorur p\u00ebrmes sh\u00ebrbimeve Okta, por si\u00e7 duket, nj\u00eb token dhe tre llogari (nga disa mij\u00ebra), t\u00eb kompromentuara nga thyerja e Okta, nuk u z\u00ebvend\u00ebsuan dhe vazhduan t\u00eb funksiononin, t\u00eb cilat sulmuesi i shfryt\u00ebzoi. K\u00ebto t\u00eb dh\u00ebna u konsideruan t\u00eb pap\u00ebrdorura, por n\u00eb t\u00eb v\u00ebrtet\u00eb lejuan qasje n\u00eb platform\u00ebn Atlassian, sistemin e menaxhimit t\u00eb kodit Bitbucket, aplikacionin SaaS q\u00eb kishte qasje administrative n\u00eb mjedisin Atlassian Jira, dhe n\u00eb nj\u00eb mjedis n\u00eb AWS, q\u00eb sh\u00ebrben katalogun Cloudflare Apps, por nuk kishte qasje n\u00eb infrastruktur\u00ebn CDN dhe nuk ruante t\u00eb dh\u00ebna t\u00eb ndjeshme. <\/p>\n
Incidenti nuk preku t\u00eb dh\u00ebnat dhe sistemet e p\u00ebrdoruesve t\u00eb Cloudflare. Auditi i kryer tregoi se sulmi u kufizua n\u00eb sistemet me produktet Atlassian dhe nuk u p\u00ebrhap n\u00eb t\u00eb tjera hostingut<\/a>, fal\u00eb aplikimit t\u00eb modelit me besim zero (Zero Trust) dhe izolimit t\u00eb pjes\u00ebve t\u00eb infrastruktur\u00ebs. <\/p>\n Thyerja e serverit t\u00eb Cloudflare u identifikua m\u00eb 23 n\u00ebntor, nd\u00ebrsa gjurm\u00ebt e para t\u00eb qasjes s\u00eb paautorizuar n\u00eb wiki dhe sistemin e gjurmimit t\u00eb gabimeve u regjistruan m\u00eb 14 n\u00ebntor. M\u00eb 22 n\u00ebntor, sulmuesi vendosi nj\u00eb backdoor p\u00ebr t\u00eb siguruar akses t\u00eb vazhduesh\u00ebm, krijuar me ndihm\u00ebn e ScriptRunner p\u00ebr Jira. N\u00eb t\u00eb nj\u00ebjt\u00ebn dit\u00eb, sulmuesi fitoi akses n\u00eb sistemin e menaxhimit t\u00eb kodit burimor, ku p\u00ebrdorej platforma Atlassian Bitbucket. Pas k\u00ebsaj, u p\u00ebrpoq t\u00eb lidhej me konsol\u00ebn server<\/a>, e cila p\u00ebrdorej p\u00ebr qasjen n\u00eb nj\u00eb datacenter t\u00eb ri n\u00eb Brazil, por t\u00eb gjitha p\u00ebrpjekjet p\u00ebr lidhje ishin t\u00eb pasuksesshme. <\/p>\n Duket se aktiviteti i sulmuesit u kufizua n\u00eb studimin e arkitektur\u00ebs s\u00eb rrjetit t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes dhe k\u00ebrkimin e pikave t\u00eb dob\u00ebta. N\u00eb aktivitetin e tij, sulmuesi p\u00ebrdori k\u00ebrkimin n\u00eb wiki p\u00ebr fjal\u00eb ky\u00e7e q\u00eb ishin t\u00eb lidhura me qasjen e larg\u00ebt, sekrete, openconnect, cloudflared dhe tokena. U regjistrua hapja e 202 faqeve wiki (nga 194100) dhe 36 raporte problemesh (nga 2059357), q\u00eb lidhen me menaxhimin e zgjidhjeve t\u00eb dob\u00ebsive dhe rotacionin e \u00e7el\u00ebsave. Gjithashtu, u identifikua shkarkimi i 120 repo me kod (nga 11904), shumica e t\u00eb cilave ishin t\u00eb lidhura me backup, konfigurimin dhe menaxhimin e CDN, sistemet e identifikimit, qasjen e larg\u00ebt dhe p\u00ebrdorimin e platformave Terraform dhe Kubernetes. N\u00eb disa nga repo, ishin t\u00eb pr\u5b58\u5728shme \u00e7el\u00ebsa t\u00eb koduar, t\u00eb l\u00ebn\u00eb n\u00eb kod, t\u00eb cilat u z\u00ebvend\u00ebsuan menj\u00ebher\u00eb pas incidentit, p\u00ebrkund\u00ebr p\u00ebrdorimit t\u00eb metodave t\u00eb sigurta t\u00eb enkriptimit. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 20% \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 wiki-\u0441\u0430\u0439\u0442 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Atlassian Confluence, \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a Atlassian Jira \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u043e\u043c Bitbucket. \u0420\u0430\u0437\u0431\u043e\u0440 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0442\u043e\u043a\u0435\u043d\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113361","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kompania Cloudflare zbuloi informacione mbi thyerjen e nj\u00eb nga server\u00ebt e saj | ProHoster","description":"Kompania Cloudflare, e cila ofron nj\u00eb rrjet shp\u00ebrndarjeje t\u00eb p\u00ebrmbajtjes dhe sh\u00ebrben rreth 20% t\u00eb trafikut t\u00eb internetit, publikoi nj\u00eb raport mbi thyerjen e nj\u00eb nga server\u00ebt e saj, ku funksiononte nj\u00eb wiki brenda e bazuar n\u00eb platform\u00ebn Atlassian Confluence, nj\u00eb sistem p\u00ebr gjurmimin e gabimeve Atlassian Jira dhe nj\u00eb sistem t\u00eb menaxhimit t\u00eb kodit Bitbucket. Analiza tregoi se sulmuesi arriti t\u00eb fitonte qasje n\u00eb server duke shfryt\u00ebzuar tokenat, q\u00eb u mor\u00ebn nga thyerja e","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kompaniya-cloudflare-raskryla-svedeniya-o-vzlome-odnogo-iz-svoih-serverov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 20% \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 wiki-\u0441\u0430\u0439\u0442 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Atlassian Confluence, \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a Atlassian Jira \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u043e\u043c Bitbucket. \u0420\u0430\u0437\u0431\u043e\u0440 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0442\u043e\u043a\u0435\u043d\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kompaniya-cloudflare-raskryla-svedeniya-o-vzlome-odnogo-iz-svoih-serverov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-02T11:41:16+00:00","article:modified_time":"2024-02-02T11:41:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"113361","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 16:53:32","updated":"2026-02-09 21:41:53","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113361","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=113361"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113361\/revisions"}],"predecessor-version":[{"id":160155,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113361\/revisions\/160155"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=113361"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=113361"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=113361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"