- Social
- Oct 26th, 2023
Okta Hack and steps for remediation
The Okta Breach
A Okta support system was compromised, and the unauthorized access. We give credit where credit is due; BeyondTrust own tools and Cloudflare for discovery.
While it has been reported that 175 clients (BeyondTrust and Cloudfare) are breached, another was the popular 1Password app company but not any database or such.
We believe in Okta, having been in business for over 17 years of helping business and being an Okta for eight years. We are their longest-serving partner by far. Our engineers see and provide strategic support the most complex companies for deployment.
Do this within your Okta instance, or ask us to help.
What enhancements must be turned on or reviewed if you're a current Okta customer? If you don’t know below, ask us!
- Run a report in Okta for all MFA changes.
- Run all password resets company-wide.
- Enable MFA hardware, like Yubikey or Fido devices.
Being Proactive.
- Specific reports should be turned on. EX: New User created.
- Have old users been reactivated?
- Do the user sessions have the proper authentication with it?
- Any MFA request, changes, removals or overrides.
- Access to sensitive business applications. Run a report on those business applications.
- Does your business have supply change providers accessing your tenants?
- Do you have WorkDay as a master where you provision external workers and partners? Is this set up correctly, and has this been flushed out with a massive reset?
Key Links within Okta to help.
- Tracking Unauthorized Access to Okta’s Support System Link
- Auditing customer support actions in your Okta tenant using System Log Link
- Okta and Splunk Combine to Detect Common Attacks Link
- Exporting Okta Log Data Link
- System Log Queries for Attempted Account Takeover Link
- User Sign-in and Recovery Events in the Okta System Log Link
- Exporting Browser Log Files for Troubleshooting Link
- Defending Against Session Hijacking Link
- Understanding the Risks of Persisting Session Cookies Across Browser Sessions Link
- Guidance for Generating HAR Files Link
- How to Remove Secrets from a .har File Link
- HealthInsight tasks and recommendations Link
- HealthInsight tasks and recommendations Link
What do our engineers do very well with Okta?
We actively work for the protection and authentication of users for corporate applications. We help customers build secure authentication using Okta efficiently and effectively and quickly accelerate any website or application. We can help you on your journey to a more secure Okta instance and work with you on a zero-trust model.
If you want a secure webpage for on and off-board users to Okta with checks and balances, check out our Orchestration Engine.
The Orchestration Engine makes it easy to provision users with cloud services for your business.