this post was submitted on 21 Oct 2023
166 points (98.8% liked)
Technology
59347 readers
6293 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
This is the best summary I could come up with:
“HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users,” Bradbury wrote.
The CSO also didn't say whether access to the compromised support system was protected by two-factor authentication, which best practices call for.
BeyondTrust’s access policy controls stopped the attacker’s “initial activity, but limitations in Okta’s security model allowed them to perform a few confined actions,” the company said without elaborating.
The initial incident response indicated a possible compromise at Okta of either someone on their support team or someone in position to access customer support-related data.
In December 2022, hackers stole Okta source code stored in a company account on GitHub.
Friday’s post contains IP addresses and browser user agents used by the threat actors that others can use to indicate if they have also been affected.
The original article contains 431 words, the summary contains 140 words. Saved 68%. I'm a bot and I'm open source!
Might need to work on the summarizing...