您现在的位置是:焦點 >>正文
【】
焦點572人已围观
简介Okta, the San Francisco-based identity and access management company, reported a security breach on ...
Okta, the San Francisco-based identity and access management company, reported a security breach on Friday. Hackers gained access to private customer information through its customer support management system.
In a site-wide announcement, Okta Chief Security Officer David Bradbury revealed that hackers viewed content uploaded by some Okta customers related to recent support cases. These files, known as HTTP archive (HAR) files, help support personnel replicate customer browser activity for troubleshooting.
SEE ALSO:23andMe may have suffered yet another breach – your data is in jeopardy"HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users," Bradbury said.
Bradbury did not disclose how the credentials were stolen nor if two-factor authentication was in place for the compromised support system. To mitigate the damage, Okta revoked embedded session tokens and advised customers to sanitize credentials within HAR files before sharing.
According to Arstechnica, the initial hack was stopped by security firm BeyondTrust, which alerted Okta to suspicious activity about a month ago. However, due to some flaws within Okta's security model, some actions were still carried out by malicious actors.
Bradbury confirmed that all affected customers have been informed. He also provided IP addresses and browser user agents associated with the hackers for further investigation. He also added that Okta's main production service and Auth0/CIC case management system remain unaffected.
Okta has had its fair share of hacker troubles lately. In March 2022, a group called Lapsus$ accessed an Okta admin panel, allowing them to reset customer passwords and authentication credentials. In December of that same year, Okta's source code was stolen from a GitHub account.
TopicsCybersecurity
Tags:
转载:欢迎各位朋友分享到网络,但转载请说明文章出处“夫榮妻貴網”。http://new.maomao321.com/news/29b50099470.html
相关文章
Katy Perry talks 'Rise,' her next batch of songs, and how to survive Twitter
焦點Katy Perry recently surpassed 90 million followers on Twitter, making her the person with the most f ...
【焦點】
阅读更多ChatGPT traffic spikes as students return to school
焦點Students are back to school and back to ChatGPT for homework help. At least that's the theory for a ...
【焦點】
阅读更多Wordle today: The answer and hints for October 8
焦點You made it to the Sunday! Now you just have to make it to the end of the Wordle. As always, we're s ...
【焦點】
阅读更多
热门文章
- Give your kitchen sponge a rest on this adorable bed
- A government shutdown means bad news for Fat Bear Week
- Best Samsung Galaxy Watch 6 preorder deal: Get a $50 gift card and watch band when you pre
- Wordle today: Here's the answer and hints for July 24
- Dramatic photo captures nun texting friends after Italy earthquake
- 'Quordle' today: See each 'Quordle' answer and hints for September 20, 2023
最新文章
Tesla's rumored P100D could make Ludicrous mode even more Ludicrous
Durex is recruiting condom testers in the UK
The 15 best K
Pornhub accused of abusing user data by #StopDataPorn
This German startup wants to be your bank (without being a bank)
Elon Musk 'likes' trending #BanTheADL posts as white supremacist ad runs on platform