#Cloudflarecyberattack #cyberthreats #cybersecurityincident #datacompromise #dataprotection #hackingchallenges #internalsystemssecurity #networksecuritybreach #Oktabreach #zugtimes
Okta: Breach Affected All Customer Support Users
https://krebsonsecurity.com/2023/11/okta-breach-affected-all-customer-support-users/
The final report on the Okta security breach indicates that the attackers were able to access HAR files containing session tokens of 134 customers, but it appears they were very selective in which they chose to pursue follow-up attacks on. Only five instances of successful session hijacking were logged.
A #1Password security incident linked to the #Oktabreach #okta
Two of my best security tools
OKTA Breached Again.
Threat hunting rules are pushed to @sigma_hq official repo.
Based on
#BeyondTrust
and
#cloudflare
investigation and threat hunting the IOC. A set of rules is published in the
@sigma_hq
repository to identify the IOCs in the environment.
https://github.com/SigmaHQ/sigma/blob/master/rules-emerging-threats/2023/TA/Okta-Support-System-Breach/README.md
Rules:
1- rules-threat-hunting/cloud/okta/okta_password_health_report_query.yml
2- rules-emerging-threats/2023/TA/Okta-Support-System-Breach/okta_apt_suspicious_user_creation.yml
3- rules/cloud/okta/okta_admin_activity_from_proxy_query.yml
🚨 1Password Breach: The Ripple Effect of Okta's Incident 🚨
The recent #OktaBreach raises major concerns for enterprise IAM security, and 1Password wasn't spared.
A new internal report by 1pass reveals disturbing insights.
🔗 Read Full Article
https://acsense.com/blog/1password-breach-the-ripple-effect-of-oktas-incident/
Hackers Stole Access Tokens from Okta’s Support Unit
https://krebsonsecurity.com/2023/10/hackers-stole-access-tokens-from-oktas-support-unit/
#ALittleSunshine #CharlotteWylie #DataBreaches #MarcMaiffret #BeyondTrust #Oktabreach #Okta