Okta, the San Francisco-based identity and access management company, reported a security breach on Friday. Hackers gained access to private customer information through its customer support management system.
In a site-wide announcement, Okta Chief Security Officer David Bradbury revealed that hackers viewed content uploaded by some Okta customers related to recent support cases. These files, known as HTTP archive (HAR) files, help support personnel replicate customer browser activity for troubleshooting.
SEE ALSO:23andMe may have suffered yet another breach – your data is in jeopardy"HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users," Bradbury said.
Bradbury did not disclose how the credentials were stolen nor if two-factor authentication was in place for the compromised support system. To mitigate the damage, Okta revoked embedded session tokens and advised customers to sanitize credentials within HAR files before sharing.
According to Arstechnica, the initial hack was stopped by security firm BeyondTrust, which alerted Okta to suspicious activity about a month ago. However, due to some flaws within Okta's security model, some actions were still carried out by malicious actors.
Bradbury confirmed that all affected customers have been informed. He also provided IP addresses and browser user agents associated with the hackers for further investigation. He also added that Okta's main production service and Auth0/CIC case management system remain unaffected.
Okta has had its fair share of hacker troubles lately. In March 2022, a group called Lapsus$ accessed an Okta admin panel, allowing them to reset customer passwords and authentication credentials. In December of that same year, Okta's source code was stolen from a GitHub account.
TopicsCybersecurity
(责任编辑：時尚)
Chinese gymnastics team horrifies crowd with human jump rope
Rita Ora dressed up like Post Malone for HalloweenApple plans to sell a clear case for the iPhone XRHow white noise helps you sleepFake news reports from the Newseum are infinitely better than actual newsNew Zealand designer's photo series celebrates the elegance of aging
Not only is age nothin’ but a number -- it can be a asset when it comes to style.。 That’
...[详细]Rihanna wants Trump to please stop playing her music at his 'tragic rallies'
It's getting tougher for Trump's playlist organizers, with the likes of Pharrell Williams to Axl Ros
...[详细]Apple has cut production on iPhone XR, XS, and XS Max, report says
As the holidays approach, Apple's suppliers are not happy.。 The company slashed production of all th
...[详细]Here's how long it takes a Lego head to pass through your body
Discovering that your kid has swallowed Lego is pretty annoying as a parent, but these researchers d
...[详细]New Zealand designer's photo series celebrates the elegance of aging
Not only is age nothin’ but a number -- it can be a asset when it comes to style.。 That’
...[详细]Everyone please remember to wish Cat Stevens a 'Happy National Cat Day'
Oh baby, baby it's a wild world.
。It's hard to get by just upon a smile, so we're here to offer you s
...[详细]How white noise helps you sleep
When a crew member aboard Star Trek's USS Enterprise is accused of sabotaging the futuristic ship, a
...[详细]Sea ice in the central Arctic should be growing. It's not.
In the deep middle of the remote Arctic Ocean, things are amiss.。With the passage of summer, the ice
...[详细]Pole vaulter claims his penis is not to blame
Following the cringeworthy moment in which pole vaulter Hiroki Ogita's penis grazed the bar and he f
...[详细]Nicki Minaj made 2 hilariously NSFW shoutouts during the People's Choice Awards
If you have something important you want to get off your chest, there are few better places to do it
...[详细]Katy Perry talks 'Rise,' her next batch of songs, and how to survive Twitter
Chrissy Teigen's Emmy Awards face is a relatable cringe meme
