Skip to main content

Okta Breach


dips
Forum|alt.badge.img+7
  • Veeam Legend
  • 808 comments

Some late breaking news. Okta suffered a breach to their Support Case Management System which potentially resulted in HTTP Archive Files being accessed.

More here: https://sec.okta.com/harfiles & 

https://krebsonsecurity.com/2023/10/hackers-stole-access-tokens-from-oktas-support-unit/

7 comments

Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8512 comments
  • October 20, 2023

Wow!  An identity management company hacked which is definitely not good.


CarySun
Forum|alt.badge.img+7
  • Veeam Vanguard
  • 200 comments
  • October 20, 2023

Another hacker wins story……

What we can trust????🤔


dips
Forum|alt.badge.img+7
  • Author
  • Veeam Legend
  • 808 comments
  • October 20, 2023
CarySun wrote:

Another hacker wins story……

What we can trust????🤔

That’s a good question. Is not been a great week, first with Cisco’s vulnerability and now this. 


CarySun
Forum|alt.badge.img+7
  • Veeam Vanguard
  • 200 comments
  • October 20, 2023

Yep. Over 40,000 Cisco IOS XE devices were infected with a backdoor using zero-day. What’s the week??? So sad.

Anyway, have a good weekend everyone!!

 


dips
Forum|alt.badge.img+7
  • Author
  • Veeam Legend
  • 808 comments
  • October 20, 2023

Thanks @CarySun  you too!


dloseke
Forum|alt.badge.img+8
  • Veeam Vanguard
  • 1447 comments
  • October 23, 2023

Wait….didn’t they have some sort of breach or vulnerability reported a year ago too?

Edit:  it was nearly 2 years ago, but I don’t recall all the details.  

 

https://www.reliaquest.com/blog/the-okta-breach-what-we-know-so-far/

 


dips
Forum|alt.badge.img+7
  • Author
  • Veeam Legend
  • 808 comments
  • October 23, 2023
dloseke wrote:

Wait….didn’t they have some sort of breach or vulnerability reported a year ago too?

Edit:  it was nearly 2 years ago, but I don’t recall all the details.  

 

https://www.reliaquest.com/blog/the-okta-breach-what-we-know-so-far/

 

Yep, they were breached by Lapsus$

https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/


Comment