Okta,Watch Project X Online the San Francisco-based identity and access management company, reported a security breach on Friday. Hackers gained access to private customer information through its customer support management system.
In a site-wide announcement, Okta Chief Security Officer David Bradbury revealed that hackers viewed content uploaded by some Okta customers related to recent support cases. These files, known as HTTP archive (HAR) files, help support personnel replicate customer browser activity for troubleshooting.
SEE ALSO: 23andMe may have suffered yet another breach – your data is in jeopardy"HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users," Bradbury said.
Bradbury did not disclose how the credentials were stolen nor if two-factor authentication was in place for the compromised support system. To mitigate the damage, Okta revoked embedded session tokens and advised customers to sanitize credentials within HAR files before sharing.
According to Arstechnica, the initial hack was stopped by security firm BeyondTrust, which alerted Okta to suspicious activity about a month ago. However, due to some flaws within Okta's security model, some actions were still carried out by malicious actors.
Bradbury confirmed that all affected customers have been informed. He also provided IP addresses and browser user agents associated with the hackers for further investigation. He also added that Okta's main production service and Auth0/CIC case management system remain unaffected.
Okta has had its fair share of hacker troubles lately. In March 2022, a group called Lapsus$ accessed an Okta admin panel, allowing them to reset customer passwords and authentication credentials. In December of that same year, Okta's source code was stolen from a GitHub account.
Topics Cybersecurity
Asus VivoWatch 6 AERO measures blood pressure and ECG
How to clean your filthy video game controller
The internet thinks Ed Sheeran's portrait looks like Van Gogh and we totally get it
WhatsApp is making viral content less viral to fight coronavirus misinformation
The cicadas aren't invading the U.S.
Headspace offers free guided meditations and workouts for New Yorkers
Barack Obama tweets at Jimmy Kimmel after his moving speech about the ACA
How advocacy organizations are adapting to the coronavirus pandemic
Sony launches new flagship XM6 headphones: Order them now
Rihanna won the Met Gala again. Goodnight, everyone.
The Amazon Book Sale is coming April 23 through 28
Zoom is different on your phone, so here’s when to use it
A poor duck with a knife sticking out of its head is making everyone very upset
IRS to launch new website to check the status of your stimulus payment
Musetti vs. Diallo 2025 livestream: Watch Madrid Open for free
Rihanna won the Met Gala again. Goodnight, everyone.
Tesla will cut salaries to weather the coronavirus pandemic
Yes, you can now pleasure yourself for a good cause
Watch how an old Venus spacecraft tumbled before crashing to Earth
Twitter will now give more of your user data to advertisers
TikTok fixes a number of ugly security flawsScammers are trying to fool people into thinking they've been draftedInstagram just launched new TikTok — ahem, Boomerang — effectsYouTube’s new 'made for kids' content rules are a good first stepThe most insightful vision of the future at CES came from HBO's 'Westworld'Ring admits its employees tried to access customers' private videoRussian hackers are still going to be a huge problem for 2020 electionsIndia's biggest online retailer is acquiring eBay's India business, report saysSerena Williams and Roger Federer to play in Australian bushfire charity matchDid you know you shouldn't feed ducks bread? These people didn't.Mark Zuckerberg gives up on doing personal 'yearly challenges'Walmart is now using robots to fulfill grocery ordersIndia's biggest online retailer is acquiring eBay's India business, report saysIndia's biggest online retailer is acquiring eBay's India business, report saysThe most insightful vision of the future at CES came from HBO's 'Westworld'Samsung reveals how many Galaxy Fold phones it really sold, sort ofHow to make Australian trolls angry: Tell them their country isn't realYoungest Ed Sheeran fan immediately stops crying at sound of 'Shape of You'Twitter hails 'braveheart' mother who jumped on a leopard to save her sonThe most insightful vision of the future at CES came from HBO's 'Westworld' Facebook 'Safety Check' activated amidst violent Charlotte protests More than a third of both presidential candidates' Twitter followers are bots, study finds CNN reporter bodychecked to ground amid violent protests in Charlotte Tim Cook: Apple's biggest contribution to mankind will be about health Americans over 65 share the most fake news, study says Geode lips as an Instagram beauty trend are too dazzling to behold Creative mom puts her napping twins into awesome settings Here’s what you need to know from CES 2019 Day 2 Google Chrome Labs' digital Etch Here are the flying taxis, electric motorcycles, e Big ass fatberg found in sewer of British seaside town Man shot during protests in Charlotte dies Inside Google's very strange amusement park ride at CES 2019 Hillary Clinton's 'Between Two Ferns' interview is hilariously awkward Paul Hollywood is staying on 'Bake Off' and everyone is making the same joke An editor for 'The Verge' took a job with Apple — and didn't tell his employer Scientists detect mysterious repeating signals from deep, deep space Google Assistant is even on Google Maps now Proposal for marriage equality AND free McNuggets is the perfect deal Guess what? U.S. carbon emissions popped back up in a big way
1.9774s , 8200.6015625 kb
Copyright © 2025 Powered by 【Watch Project X Online】,Information Information Network