Okta, the San Francisco-based identity and access management company, reported a security breach on Friday. Hackers gained access to private customer information through its customer support management system.
In a site-wide announcement, Okta Chief Security Officer David Bradbury revealed that hackers viewed content uploaded by some Okta customers related to recent support cases. These files, known as HTTP archive (HAR) files, help support personnel replicate customer browser activity for troubleshooting.
SEE ALSO:23andMe may have suffered yet another breach – your data is in jeopardy"HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users," Bradbury said.
Bradbury did not disclose how the credentials were stolen nor if two-factor authentication was in place for the compromised support system. To mitigate the damage, Okta revoked embedded session tokens and advised customers to sanitize credentials within HAR files before sharing.
According to Arstechnica, the initial hack was stopped by security firm BeyondTrust, which alerted Okta to suspicious activity about a month ago. However, due to some flaws within Okta's security model, some actions were still carried out by malicious actors.
Bradbury confirmed that all affected customers have been informed. He also provided IP addresses and browser user agents associated with the hackers for further investigation. He also added that Okta's main production service and Auth0/CIC case management system remain unaffected.
Okta has had its fair share of hacker troubles lately. In March 2022, a group called Lapsus$ accessed an Okta admin panel, allowing them to reset customer passwords and authentication credentials. In December of that same year, Okta's source code was stolen from a GitHub account.
TopicsCybersecurity
(责任编辑：娛樂)
Xiaomi accused of copying again, this time by JawboneTechnology meets nature in beautiful 'Plant Your Mac' photo series10 tips for new writers from a selfNASA to explore a metal asteroid that could be the core of a doomed planetAirbnb activates disaster response site for Louisiana floodingMom discovers security cameras hacked, kids' bedroom livestreamed
A mother in Houston, Texas woke up one morning to pretty much every parent's worst-case scenario.。 "
...[详细]Rory McIlroy had a very blunt response to Tiger Woods' Christmas outfit
LONDON -- Anyone who follows Tiger Woods on Twitter will already be well aware of the "Mac Daddy San
...[详细]'Harry Potter' casting director explains why Robin Williams couldn't play Hagrid
When the 。 Harry Potter 。movies began casting exclusively for British talent, there were no exceptions
...[详细]The artist blowing people's minds in virtual reality
Upon Salvador Dali's death in 1989, the world was reminded of his unique ability to render "the unre
...[详细]Florida hurricane forecast remains uncertain, but trends in state's favor
For days, a war has been raging between two of the premiere computer models used to help predict the
...[详细]Exclusive: Denzel Washington and Viola Davis are a magnificent match in 'Fences' clip
Already in early Oscar discussions, Viola Davis and Denzil Washington demonstrate their chemistry an
...[详细]Cinnabon fails the galaxy with terrible tweet about Carrie Fisher's death
The brand-fail force is strong with Cinnabon. 。 Carrie Fisher died at age 60 on Tuesday and while fan
...[详细]The ad block apocalypse didn't arrive and doesn't look like it's going to
News from the ad blocking front has given publishers and advertisers little reason to be hopeful ove
...[详细]One of the first Apple computers ever made is currently up for auction.A rare "Celebration" Apple-1
...[详细]Apple's software has been anything but 'magical' lately
There was a time when I could blindly update my Apple devices and trust that the update wouldn't bre
...[详细]Fyvush Finkel, Emmy winner for 'Picket Fences,' dies at 93
Woman gets horny guy to kiss a tractor for a chance at nude pictures
