Okta has been hacked by the popular hacking group LASPUS, who have been targeting customers of the popular identity management solution for over two months without detection.
Backdoors have likely been installed in the world's biggest companies, including Amazon, Salesforce, Twitter, Cloudflare, Workday, Twlilio, JetBlue, HP, Linkedin, Hubspot, Tesla, Nvidia & 6500+ more.
Source: twitter.com
LASPUS Telegram (Beware!) t.me
ahahahahahahA my company just switched to okta
Hack and Leak GPT3 or the Chinese Government Transformer?
Am I understanding this correct?
Lapsus$ got superuser on some Okta internal account,
then used that to escalate,
and now plausibly have access to any logins that were controlled by okta anywhere?
omg think of the bLUe TeaMs
Is there any more useless tech field to go into than security? The alerts the screen monkeys were getting stuck on never failed to make me smile. Didn't know a switch from a patch panel, never heard of mac addresses, you name it. All they did was post things other people were posting on twitter, like when there was a vuln, just posting about how bad it was, nothing about mitigating.
and yet, nothing will happen, like always
Yep.
And yet they were too stupid to avoid getting ransomware'd by Nvidia.
HAY GUISE LET'S PUT ALL OUR EGGS IN ONE BASKET!!!! IN DA CLOUD!!!
t. single sign on
HN discussion as enlightening as you'd expect:
>>Why outsource the most business-critical parts like auth and email to a third party, knowing that they're the biggest target?
>Because auth is super hard? Have you tried implementing SSO for arbitrary OAuth2 providers?
Deserved it and all Nvidia's fault.
Nothingburger.
As per the usual the orange site is filled with retard front end devs.
Go LASPUS, destroy everything inshallah
They're too busy attention whoring and infighting to even release everything they claim they got from previous targets. They're incompetent and think people care about the source code to Cortana and Bing as their latest big drops.
If Lapsussybaka releases windows 7 source code I will pay them $1000 unironically
JUST
>attention whoring and infighting
Many such cases. Sad!
I miss the days of wanton destruction for the giggles. Now all these fags wanna get paid.
>twitter.com
God I hope my company gets rolled and frozen tomorrow,
Are these dudes Russian state sponsored hackers? The timing of their hacks seems just right for responding to the sanctions from the west