Okta Chief Security Officer David Bradbury warned on Wednesday that a total of 366 customers could potentially be impacted after hacking group Lapsus$ gained remote access to a support engineer's computer at third-party sub-processor Sitel from Jan. 16-21.
The authentication firm's security team received an alert on Jan. 20 that a new password was added to a Sitel employee’s Okta account from a new location. Okta's security team immediately investigated the alert, worked with its service desk to contain and reset the user's account and notified Sitel, which partnered with a forensic firm to perform an investigation. The investigation was conducted until Feb. 28, with findings given to Sitel on March 17.
"While the attacker never gained access to the Okta service via account takeover, a machine that was logged into Okta was compromised and they were able to obtain screenshots and control the machine through the RDP session," Bradbury. "I am greatly disappointed by the long period of time that transpired between our notification to Sitel and the issuance of the complete investigation report.
France Dernières Nouvelles, France Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
'This Is Really, Really Bad': Lapsus$ Gang Claims Okta HackLapsus$ leaking Microsoft source code would be bad enough. Breaching Okta could be much, much worse.
Lire la suite »
Microsoft and Okta detail the impact of recent Lapsus$ attacks | EngadgetIn a post on the Microsoft Security blog, the tech has revealed that the group gained limited access to its systems using a single compromised account..
Lire la suite »
Authentication firm Okta probes report of digital breachOkta Inc, whose authentication services are used by companies including Fedex and Moody's to provide access to their networks, is investigating a report of a digital breach after hackers posted screenshots of what they said was internal information.
Lire la suite »
Authentication Firm Okta Says It Has Found No Evidence of New Attack After Hackers Claim BreachHacking group Lapsus$ posted screenshots on its Telegram channel claiming it had access to a number of Okta systems.
Lire la suite »
Stocks Making the Biggest Moves in the Premarket: Nike, Okta, Alibaba and MoreThe stocks making the biggest moves in premarket trading include Nike, Okta, Alibaba and more.
Lire la suite »
Okta investigating reports of possible digital breachAuthentication services provider Okta Inc is investigating a report of a digital breach, the company said on Tuesday, after hackers posted screenshots showing what they claimed was its internal company environment
Lire la suite »