Microsoft says a single account was compromised.
, Okta pushed back against the group’s claims that it has access to its authentication service, claiming that “The Okta service has not been breached and remains fully operational.”This week, the actor made public claims that they had gained access to Microsoft and exfiltrated portions of source code. No customer code or data was involved in the observed activities. Our investigation has found a single account had been compromised, granting limited access.
Microsoft does not rely on the secrecy of code as a security measure and viewing source code does not lead to elevation of risk. The tactics DEV-0537 used in this intrusion reflect the tactics and techniques discussed in this blog. Our team was already investigating the compromised account based on threat intelligence when the actor publicly disclosed their intrusion.
. Lapsus$ also claims that it only got around 45 percent of the code for Bing and Cortana, and around 90 percent of the code for Bing Maps. The latter feels like a less valuable target than the other two, even if Microsoft was worried about its source code revealing vulnerabilities. In its blog post, Microsoft outlines a number of steps other organizations can take to improve their security, including requiring multifactor authentication, not using “weak” multifactor authentication methods like text messages or secondary email, educating team members about the potential for social engineering attacks, and creating processes for potential responses to Lapsus$ attacks.
France Dernières Nouvelles, France Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
Hacker Group Claims Access to User Authentication Firm OktaLAPSUS$ also recently published source code for Microsoft's Cortana and Bing.
Lire la suite »
Hackers hit Microsoft, post Cortana and Bing source code | Digital TrendsA hacking group has hit Microsoft's DevOps repositories and posted the sourcecode for Cortana and other projects.
Lire la suite »
Authentication Firm Okta Says It Has Found No Evidence of New Attack After Hackers Claim BreachHacking group Lapsus$ posted screenshots on its Telegram channel claiming it had access to a number of Okta systems.
Lire la suite »
Migos' Quavo Dating Karrueche TranA source confirms to ET that the pair, who have been longtime friends, are dating.
Lire la suite »
Hacker steals $1.7 million in NFTs from DeFiance Capital founder CheongA hacker has stolen assets worth over 585 ETH from Arthur Cheong–a DeFi venture capitalist and founder of DeFiance Capital.
Lire la suite »