{"id":2244,"date":"2022-03-24T15:19:49","date_gmt":"2022-03-24T15:19:49","guid":{"rendered":"https:\/\/scienceandnerds.com\/2022\/03\/24\/okta-says-security-protocols-limited-hack-but-response-came-too-slow\/"},"modified":"2022-03-24T15:19:51","modified_gmt":"2022-03-24T15:19:51","slug":"okta-says-security-protocols-limited-hack-but-response-came-too-slow","status":"publish","type":"post","link":"https:\/\/scienceandnerds.com\/2022\/03\/24\/okta-says-security-protocols-limited-hack-but-response-came-too-slow\/","title":{"rendered":"Okta says security protocols limited hack, but response came too slow"},"content":{"rendered":"

Source: https:\/\/www.theverge.com\/2022\/3\/23\/22992894\/okta-hack-cso-security-protocol-sitel-lapsus<\/a>
\n
<\/br><\/code><\/p>\n

\n

After the disclosure of a hack affecting its authentication platform, Okta has maintained that the effects of the breach were mostly contained by security protocols and reiterated that users of the service do not need to take corrective action as a result.<\/p>\n

The statements were made by David Bradbury, chief security officer at Okta, in a video call with customers and press Wednesday morning.<\/p>\n

On Monday, hacking group Lapsus$ released images demonstrating that the group had compromised Okta\u2019s internal systems, putting thousands of businesses that rely on the authentication tool on high alert<\/a>.<\/p>\n

\u201cThe sharing of these screenshots is an embarrassment for myself and the entire Okta team,\u201d Bradbury said at the start of the call. \u201cToday I want to provide my perspective on what has transpired, and where we are with this investigation.\u201d<\/p>\n

In the course of a ten-minute briefing, Bradbury said that the hackers had compromised Okta\u2019s systems by gaining remote access to a machine belonging to an employee of Sitel \u2014 a company subcontracted to provide customer service functions for Okta. Using a remote desktop protocol, the hackers were able to input commands into the compromised machine and view the monitor output, enabling them to take screenshots, Bradbury said.<\/p>\n

\n