Okta Breach

  • 20 October 2023
  • 7 comments
  • 60 views

Userlevel 7
Badge +7
  • Veeam Legend
  • 716 comments

Some late breaking news. Okta suffered a breach to their Support Case Management System which potentially resulted in HTTP Archive Files being accessed.

More here: https://sec.okta.com/harfiles & 

https://krebsonsecurity.com/2023/10/hackers-stole-access-tokens-from-oktas-support-unit/


7 comments

Userlevel 7
Badge +20

Wow!  An identity management company hacked which is definitely not good.

Userlevel 7
Badge +7

Another hacker wins story……

What we can trust????🤔

Userlevel 7
Badge +7

Another hacker wins story……

What we can trust????🤔

That’s a good question. Is not been a great week, first with Cisco’s vulnerability and now this. 

Userlevel 7
Badge +7

Yep. Over 40,000 Cisco IOS XE devices were infected with a backdoor using zero-day. What’s the week??? So sad.

Anyway, have a good weekend everyone!!

 

Userlevel 7
Badge +7

Thanks @CarySun  you too!

Userlevel 7
Badge +6

Wait….didn’t they have some sort of breach or vulnerability reported a year ago too?

Edit:  it was nearly 2 years ago, but I don’t recall all the details.  

 

https://www.reliaquest.com/blog/the-okta-breach-what-we-know-so-far/

 

Userlevel 7
Badge +7

Wait….didn’t they have some sort of breach or vulnerability reported a year ago too?

Edit:  it was nearly 2 years ago, but I don’t recall all the details.  

 

https://www.reliaquest.com/blog/the-okta-breach-what-we-know-so-far/

 

Yep, they were breached by Lapsus$

https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/

Comment