Right there in the article... Moz signed up with CloudFlare "but Mr. Skinner said the attacker has found new ways to attack their systems."

Does anyone know what that might be? There are quite a few people on HN who have zero sympathy for DDoS victims who don't pony up for Cloudflare etc., but I'm curious about situations when that isn't going to help or other attack vectors that will get you regardless.