Cloudflare Hacked by Suspected State-Sponsored Threat Actor

Yes. There's nothing more in that article than what we said in the blog.

One of the things that troubled me most in the vault 7 was the "attribution engineering toolkit".

Some sophisticated stuff goes into not just crafting function, but what something looks like

I am always sceptical... no, quite cynical, when a few days or hours after an incident someone pops up and says "It was the <Russians/Koreans/Chinese>"

Perhaps one of the most potent payloads in some hacks, perhaps even the overarching motive, is to pin the action on someone or something.

It raises the question, how much that really matters.

and "nation-state" is the new "sophisticated sql injection"

It's always state sponsored:

https://youtu.be/UawS3_iuHoA?t=378

Why not, maybe we can get the original meaning of the term hacker back at some point.

A hacker is an individual or a hacker group. When a state is involved we can think more about the typical work of intelligence agencies and/or cyberwar.

Threat actor is a more generic term that covers all kinds of attackers.

For example, it could be an insider who exploits existing privileges (no hacking involved). Or it could refer to a nation state or organised crime (not an individual).