14 ms·
>First, Okta should get credit for publicly acknowledging the compromise. "In early October 2023, Okta was notified of a breach resulting in hackers stealing H
by MangoCoffee 3y ago
>First, Okta should get credit for publicly acknowledging the compromise.
"In early October 2023, Okta was notified of a breach resulting in hackers stealing HTTP access tokens from Okra's support platform by BeyondTrust. Okta CTO Charlotte Wylie denied the incident for a number of weeks, but later recognized that a breach had occurred"
https://en.wikipedia.org/wiki/Okta,_Inc.#cite_note-33 https://en.wikipedia.org/wiki/Okta,_Inc.#cite_note-33
"Okta’s Wylie declined to answer questions about how long the intruder may have had access to the company’s case management account"
https://krebsonsecurity.com/2023/10/hackers-stole-access-tokens-from-oktas-support-unit/ https://krebsonsecurity.com/2023/10/hackers-stole-access-tok...