时间:2025-04-04 05:36:02 来源:网络整理编辑:熱點
Okta, the San Francisco-based identity and access management company, reported a security breach on
Okta, the San Francisco-based identity and access management company, reported a security breach on Friday. Hackers gained access to private customer information through its customer support management system.
In a site-wide announcement, Okta Chief Security Officer David Bradbury revealed that hackers viewed content uploaded by some Okta customers related to recent support cases. These files, known as HTTP archive (HAR) files, help support personnel replicate customer browser activity for troubleshooting.
SEE ALSO:23andMe may have suffered yet another breach – your data is in jeopardy"HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users," Bradbury said.
Bradbury did not disclose how the credentials were stolen nor if two-factor authentication was in place for the compromised support system. To mitigate the damage, Okta revoked embedded session tokens and advised customers to sanitize credentials within HAR files before sharing.
According to Arstechnica, the initial hack was stopped by security firm BeyondTrust, which alerted Okta to suspicious activity about a month ago. However, due to some flaws within Okta's security model, some actions were still carried out by malicious actors.
Bradbury confirmed that all affected customers have been informed. He also provided IP addresses and browser user agents associated with the hackers for further investigation. He also added that Okta's main production service and Auth0/CIC case management system remain unaffected.
Okta has had its fair share of hacker troubles lately. In March 2022, a group called Lapsus$ accessed an Okta admin panel, allowing them to reset customer passwords and authentication credentials. In December of that same year, Okta's source code was stolen from a GitHub account.
TopicsCybersecurity
Ivanka Trump's unpaid interns share cringeworthy financial advice2025-04-04 04:57
There's a chocolate manhole cover in Japan and we don't know why2025-04-04 04:45
Tinder's in2025-04-04 04:25
'Arrow' tackles the gun debate to 'start a conversation'2025-04-04 04:04
17 questions you can answer if you're a good communicator2025-04-04 03:49
Someone built a 602025-04-04 03:25
'Stranger Things' Season 2 images have us ready for Halloween2025-04-04 03:15
Even Martin Luther King Jr.'s daughter shared this Facebook post about how to resist Trump2025-04-04 03:14
Katy Perry talks 'Rise,' her next batch of songs, and how to survive Twitter2025-04-04 03:01
Donald Trump left his Super Bowl watch party when the Patriots were losing2025-04-04 02:55
Richard Branson 'thought he was going to die' in bike accident2025-04-04 05:33
Vin Diesel is in 'Fifty Shades Darker' but not like you think2025-04-04 05:33
Get your feet wet as a marine biologist in a VR coral reef2025-04-04 05:27
The Nokia 3310 might come back and people just really want to play Snake2025-04-04 05:22
J.K. Rowling makes 'Harry Potter' joke about Olympics event2025-04-04 05:21
Here's even more proof that Steph Curry and Lebron James rule the NBA universe2025-04-04 04:58
Young snake catcher dies while attempting to kiss a cobra2025-04-04 03:50
Scientists need your help to find the mysterious planet they suspect is lurking in our solar system2025-04-04 03:23
Mall builds real2025-04-04 03:21
Amazon's Echo Tap gets the one feature it should have had all along2025-04-04 02:56