Tag okta

Okta, a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says the incident affected a "very…

Really big fan of Okta's "no we totally knew we got rooted in January, it was nbd we took care of it ASAP and they didn't exploit it at all, that's why we violated breach disclosure best practices (and maybe laws?) and didn't tell our users" strategy

protected concerted activity enthusiast (@BlueSpaceCanary)Tue, 22 Mar 2022 15:35 GMT

#Okta: 1. Share the information internally. 2. Collect and retain related logs. 3. Hunt logs for bad. 4. Rotate Okta privileged passwords. 5. Move on unless Okta reaches out to you that you are involved. Adjust DFIR to their context. That’s about all you can do right now.

Frank McGovern (@FrankMcG)Tue, 22 Mar 2022 05:42 GMT

https://twitter.com/NSQE/status/1506122590368137216

For everyone having collective heart attacks over the Okta breach: Go check the Okta setting to "Give access to Okta Support" and "Give directory debugger access to Okta Support." Make sure those are turned off. I am not an Okta admin. Just passing along what I've got.

H. Poteat (@NSQE)Tue, 22 Mar 2022 04:48 GMT

https://twitter.com/NSQE/status/1506130604508680192

It's a nice thought, but both settings automatically reset to false after 8 hours. They require manual resetting to extend that time. help.okta.com/oie/en-us/Cont…

ΠΠO (@oakland_dem)Tue, 22 Mar 2022 06:19 GMT

We have announced an agreement that we will be joining forces with @Auth0, a leading identity platform for developers. Together, we will shape the future of identity. Learn more: bit.ly/306OjwY

Okta (@okta)Wed, 03 Mar 2021 21:08 GMT