Okta, the San Francisco-based identity and access management company, reported a security breach on Friday. Hackers gained access to private customer information through its customer support management system.
In a site-wide announcement, Okta Chief Security Officer David Bradbury revealed that hackers viewed content uploaded by some Okta customers related to recent support cases. These files, known as HTTP archive (HAR) files, help support personnel replicate customer browser activity for troubleshooting.
SEE ALSO:23andMe may have suffered yet another breach – your data is in jeopardy"HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users," Bradbury said.
Bradbury did not disclose how the credentials were stolen nor if two-factor authentication was in place for the compromised support system. To mitigate the damage, Okta revoked embedded session tokens and advised customers to sanitize credentials within HAR files before sharing.
According to Arstechnica, the initial hack was stopped by security firm BeyondTrust, which alerted Okta to suspicious activity about a month ago. However, due to some flaws within Okta's security model, some actions were still carried out by malicious actors.
Bradbury confirmed that all affected customers have been informed. He also provided IP addresses and browser user agents associated with the hackers for further investigation. He also added that Okta's main production service and Auth0/CIC case management system remain unaffected.
Okta has had its fair share of hacker troubles lately. In March 2022, a group called Lapsus$ accessed an Okta admin panel, allowing them to reset customer passwords and authentication credentials. In December of that same year, Okta's source code was stolen from a GitHub account.
TopicsCybersecurity
(责任编辑：焦點)
Dressage horse dancing to 'Smooth' by Santana wins gold for chillest horseUK horrified by all the U.S. drug ads during Meghan Markle interviewNASA puts its money on SpaceX for a massive lunar landerNew support groups for farmworkers aim to heal widespread traumaCat gets stuck in the most awkward position everMashReads Podcast: What makes a good summer read?
Summer is coming to a close and that means one thing -- last-minute vacations! 。SEE ALSO:'Ice Cream B
...[详细]Marjorie Taylor Greene's campaign site promotes debunked conspiracy about Ilhan Omar
QAnon’s favorite Congresswoman may say it’s been years since she shared far right conspi
...[详细]Google launched a cool document scanner called Stack
Google's Area 120 – an in-house incubator, where Google engineers pursue their pet projects th
...[详细]HBO Max is about to get cheaper. Well, at least a certain version of it. In June, AT&T will laun
...[详细]One thing's for sure: you're never too old to learn. 。Massachusetts woman Clare Picciuto turned 100 F
...[详细]If the past year has taught us anything,talking to children about diversityis vital in helping to ra
...[详细]Instagram, WhatsApp, and Facebook Messenger are back after 'technical issue'
UPDATE: March 19, 2021, 3:07 p.m. EDT Instagram, WhatsApp, and Facebook Messenger are now back up.&l
...[详细]5 changes Google Maps should make for better driving directions
With the COVID-19 pandemic keeping many of us away from buses and trains (and Uber and Lyft rides),
...[详细]
The group behind a growing list of celebrity social media breaches has struck again, this time takin
...[详细]See the world change over nearly 40 years in Google Earth's new timelapse feature
Google Earth is zooming out to show us how the world is changing over time — a glacier retreat
...[详细]What brands need to know about virtual reality
Otherworldly deep sea life captured during an ocean expedition