Shulou(Shulou.com)11/24 Report--

CTOnews.com October 24 news, password hosting service 1Password issued an announcement today, saying that after an in-depth investigation, it has reached a preliminary conclusion: neither employees nor users have been affected by the Okta leak.

The customer support system of international identity software giant Okta has been hacked, using stolen credentials to hack into its support management system and access files containing Cookie and session tokens uploaded by customers.

Okta has not provided information about the affected customers that were compromised or accessed by this breach. However, the support case management system that was compromised in this attack also stores HTTP Archive (HAR) files, which are used to replicate user or administrator errors to troubleshoot problems reported by users.

Okta explained on the support management system portal: "HAR files record browser activity and may contain sensitive data, including visited page content, Header, Cookie, and so on."

And because users can access 1Password through Okta single sign-on (SSO), 1Password issued a brief statement today saying it was not affected.

The translation part of CTOnews.com here is as follows:

On September 29, we detected suspicious activity on the Okta instance used to manage employee-facing applications.

We immediately terminated the activity and found that user data or other sensitive systems, whether employee-oriented or user-oriented, had not been compromised.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.