https://tcrn.ch/3s3JZjM - 🌐 Following a recent breach in Okta’s support unit, network and security powerhouse Cloudflare, along with password manager creator 1Password, reported brief targeting by hackers. Both companies connected these intrusions to the Okta breach but affirmed that customer systems or user data remained unaffected. #OktaBreach #Cloudflare #1Password 🔐 Okta, known for offering single sign-on solutions to businesses, disclosed last Friday that cyber attackers had infiltrated its customer support division. Intruders stole diagnostic files, which potentially contain valuable user credentials. Such breaches enable malicious actors to mimic user accounts. Okta revealed that approximately 1% of its 17,000 corporate clientele, equating to 170 organizations, felt the repercussions of this security lapse. #Okta #CyberSecurity 🔍 1Password shed light on the breach's specifics, stating that intruders used a session token from an IT team member's file uploaded to Okta for problem-solving. This token allowed unauthorized access to 1Password’s Okta dashboard without a password or two-factor code. The incident transpired on September 29, well before Okta disclosed the breach's details. #1PasswordUpdate #SecurityBreach ☁️ In a parallel narrative, Cloudflare acknowledged that they too were targeted using a pilfered session token from Okta. However, Cloudflare's robust security measures, including hardware security keys resistant to phishing schemes, ensured their systems and data remained impenetrable. #CloudflareSecurity #PhishingProtection 🛡 BeyondTrust, a security enterprise, also identified an intrusion stemming from the Okta breach. While they promptly addressed their security incident and informed Okta on October 2, they claimed Okta’s acknowledgment took nearly three weeks. #BeyondTrust #SecurityCommunication 📉 Notably, this isn't Okta's maiden security challenge. The company faced code theft in December 2022 and another episode in January 2022, where hackers displayed snapshots of Okta’s internal systems. Following the current breach's announcement, Okta’s market valuation diminished by over 11%, translating to a hefty $2 billion.
