“Took Okta over two weeks”
Okta says attackers accessed files containing cookies and session tokens uploaded by customers to its support management system after breaching it using stolen credentials. … While the company has yet to provide details on what customer information was exposed or accessed in the breach, the … system breached in this attack [contains] sensitive data, such as cookies and session tokens, which threat actors could use to hijack customer accounts.
…
Last year, Okta disclosed that some of its customers’ data was exposed after the Lapsus$ data extortion group gained access to its administrative consoles in January 2022. One-time passwords (OTPs) delivered to Okta customers … were also stolen by the Scatter Swine threat group … in August 2022. Okta-owned authentication service provider Auth0 also disclosed in September that some older source code repositories were stolen from its environment. … Okta revealed its own source code theft incident in December after the company’s private GitHub repositories were hacked.
…
An Okta spokesperson did not respond to questions regarding the date of the breach and how many customers were affected. [But] one of the affected customers … provided additional insight: … BeyondTrust’s security team detected and blocked an attempt to log into an in-house Okta administrator account … using a cookie stolen from Okta. … It took Okta over two weeks to confirm the breach.

“Caesar’s Entertainment and MGM Resorts”
Okta, a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach … for at least two weeks. … Okta explained that when it is troubleshooting issues with customers it will often ask for a recording of a Web browser session (a.k.a. an … HAR file). These are sensitive files because they can include the customer’s cookies and session tokens, which intruders can then use to impersonate valid users.
…
Okta’s Deputy Chief Information Security Officer Charlotte Wylie said Okta initially believed that BeyondTrust’s alert on Oct. 2 was not a result of a breach. [It] comes just weeks after casino giants Caesar’s Entertainment and MGM Resorts were hacked. In both cases, the attackers managed to social engineer employees into resetting the multi-factor login requirements for Okta administrator accounts.

Some of the largest companies in the world use Okta to streamline their login and identity management systems, including FedEx and Zoom, according to the company. That makes Okta a high-value target for threat actors, who in a worst-case scenario could hypothetically gain access to dozens of other companies if successful in breaching Okta’s defenses.

It’s beyond my comprehension why anyone is using Okta anymore. Authentication is the most critical piece of any IT. Okta has proven again and again to be untrusted party lacking integrity. It’s just a time bomb about to go off.

Okta’s sole reason for existing is to add security to your authentication processes. [But] here we are again, with yet another breach.

Okta is some real dog****. Anyone using Okta should be running for an exit.

Until March 2022, Todd, Okta’s CEO, was accessing Okta systems with his personal (non-corp) laptop. He thought this was hilarious and made jokes about it at our company all-hands. I had never worked at a company where security was taken so casually.
…
The organization has so many problems. And this latest customer-facing escapade is no surprise.

Identity providers, password managers, VPN companies, [etc.] should never get hacked. They make their money from security products. I won’t use them if they are breached. They probably have deeper problems.
…
We can’t prove that a security company will not be breached. But once they have a significant breach, it might be time to move on. They likely have other problems. I’m looking at you LastPass!

Okta holds the keys to the castle. It has had … security incidents in the past. A compromise of the Okta systems will have a huge impact. … The margin for error is small.

The company should tank, they should be ashamed of themselves for such knuckle headed foolery.
…
Their customer told them they had a breach. … Terrible dinosaur company. There is no excuse for these shameful repeat offenses. … You deserve to collapse and go bankrupt.
…
Okta needs to go. … Look at Okta’s track record, it speaks for itself.

Okta just sent me another email today touting their Zero Trust solutions. I do have zero trust in them.

Recent Articles By Author