Okta, the San Francisco-based identity and access management company, reported a security breach on Friday. Hackers gained access to private customer information through its customer support management system.
In a site-wide announcement, Okta Chief Security Officer David Bradbury revealed that hackers viewed content uploaded by some Okta customers related to recent support cases. These files, known as HTTP archive (HAR) files, help support personnel replicate customer browser activity for troubleshooting.
SEE ALSO:23andMe may have suffered yet another breach – your data is in jeopardy"HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users," Bradbury said.
Bradbury did not disclose how the credentials were stolen nor if two-factor authentication was in place for the compromised support system. To mitigate the damage, Okta revoked embedded session tokens and advised customers to sanitize credentials within HAR files before sharing.
According to Arstechnica, the initial hack was stopped by security firm BeyondTrust, which alerted Okta to suspicious activity about a month ago. However, due to some flaws within Okta's security model, some actions were still carried out by malicious actors.
Bradbury confirmed that all affected customers have been informed. He also provided IP addresses and browser user agents associated with the hackers for further investigation. He also added that Okta's main production service and Auth0/CIC case management system remain unaffected.
Okta has had its fair share of hacker troubles lately. In March 2022, a group called Lapsus$ accessed an Okta admin panel, allowing them to reset customer passwords and authentication credentials. In December of that same year, Okta's source code was stolen from a GitHub account.
TopicsCybersecurity
(责任编辑：綜合)
Tesla's rumored P100D could make Ludicrous mode even more LudicrousFiji wins firstUber's $100M settlement over drivers as contractors may not be enoughSamsung Galaxy Note7 teardown reveals the magic behind the phone's iris scannerTributes flow after death of former Singapore president S.R. NathanHow Hyperloop One went off the rails
In December 2014, an engineer with the unlikely name Brogan BamBrogan was in the driveway of his cla
...[详细]Olympian celebrates by ordering an intimidating amount of McDonald's
It's no secret that Olympians have to eat clean for years to ensure they're at peak physical conditi
...[详细]Old lady swatting at a cat ends up in Photoshop battle
We all have that relative who gets annoyed with the cat. 。This timeless photo of an old woman shooing
...[详细]Is Samsung's Galaxy Note7 really the best phone?
On this week's 。 MashTalk
。, Lance, Pete and I talk about the new hot smartphone in town: Samsung's Ga
...[详细]Twitter grants everyone access to quality filter for tweet notifications
Twitter introduced two features Thursday in an effort to give users more control on what notificatio
...[详细]Donald Trump's tangled web of Russian influence
Donald Trump has had ties to Russia for decades, but they've thickened as his campaign for the White
...[详细]One of the most controversial power struggles in media comes to a close
One of the world's biggest media companies has been embroiled in a complex personal and professional
...[详细]There's a big piece of fake chicken stuck to this phone case
If the perfect smartphone case signals a bit about who its owner is, then this silicon fried chicken
...[详细]U.S. government issues warning on McDonald's recalled wearable devices
Last week's McDonald's debacle, which saw the fast food giant forced to recall its first wearable tr
...[详细]Florida hurricane forecast remains uncertain, but trends in state's favor
For days, a war has been raging between two of the premiere computer models used to help predict the
...[详细]Fyvush Finkel, Emmy winner for 'Picket Fences,' dies at 93
Richard Branson 'thought he was going to die' in bike accident
