【】

Okta, the San Francisco-based identity and access management company, reported a security breach on Friday. Hackers gained access to private customer information through its customer support management system.
In a site-wide announcement, Okta Chief Security Officer David Bradbury revealed that hackers viewed content uploaded by some Okta customers related to recent support cases. These files, known as HTTP archive (HAR) files, help support personnel replicate customer browser activity for troubleshooting.
SEE ALSO:23andMe may have suffered yet another breach – your data is in jeopardy"HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users," Bradbury said.
Bradbury did not disclose how the credentials were stolen nor if two-factor authentication was in place for the compromised support system. To mitigate the damage, Okta revoked embedded session tokens and advised customers to sanitize credentials within HAR files before sharing.
According to Arstechnica, the initial hack was stopped by security firm BeyondTrust, which alerted Okta to suspicious activity about a month ago. However, due to some flaws within Okta's security model, some actions were still carried out by malicious actors.
Bradbury confirmed that all affected customers have been informed. He also provided IP addresses and browser user agents associated with the hackers for further investigation. He also added that Okta's main production service and Auth0/CIC case management system remain unaffected.
Okta has had its fair share of hacker troubles lately. In March 2022, a group called Lapsus$ accessed an Okta admin panel, allowing them to reset customer passwords and authentication credentials. In December of that same year, Okta's source code was stolen from a GitHub account.
TopicsCybersecurity
相关文章
Dressage horse dancing to 'Smooth' by Santana wins gold for chillest horse
Okay forget everyone else -- this horse named Lorenzo is our favorite Olympic athlete now.。Lorenzo,2025-04-24Tom Hanks bought reporters an espresso machine because 'those poor bastards need coffee'
If there's anyone who needs coffee, Tom Hanks believes it's a White House press corps' reporter. He2025-04-24How to watch Microsoft's #MicrosoftEDU event live
Microsoft is about to unveil new products -- both hardware and software -- Tuesday, and you can join2025-04-24Unroll.me's shadiness is exactly why people don't trust tech companies
When The New York Timesreported the popular inbox-cleaning app Unroll.me was providing anonymized us2025-04-24Fyvush Finkel, Emmy winner for 'Picket Fences,' dies at 93
NEW YORK (AP) — Actor Fyvush Finkel, the plastic-faced Emmy Award-winning character actor whos2025-04-24Damn, Elon Musk's underground tunnels look slick in new video
You'll never want to drive on regular roads again after you watch Elon Musk's slick video of his fut2025-04-24
最新评论