Troy Hunt

APRIL 12, 2019

That's the second update in a row I've done on time! It's also another one with a bunch of other things in common with last week, namely commentary on yet more data breaches. It's not just the breaches in HIBP, but the ones I'm busily trying to disclose.

Data breaches 55

Data breaches Privacy IT Security 55

Security Affairs

NOVEMBER 3, 2023

Threat actors who breached the Okta customer support system also gained access to files belonging to 134 customers. Threat actors who breached the Okta customer support system in October gained access to files belonging to 134 customers, the company revealed. ” reads the post published by the company.

Data breaches 119

Data breaches Authentication Access Archiving 119

Security Affairs

NOVEMBER 29, 2023

Having finalized our investigation, we can confirm that from September 28, 2023 to October 17, 2023, a threat actor gained unauthorized access to files inside Okta’s customer support system associated with 134 Okta customers, or less than 1% of Okta customers.” ” reads the update provided by the company.

Authentication 105

Authentication Cloud Access Archiving 105

Security Affairs

FEBRUARY 9, 2024

“A use of externally-controlled format string vulnerability [CWE-134] in FortiOS fgfmd daemon may allow a remote unauthentified attacker to execute arbitrary code or commands via specially crafted requests.” Version Affected Solution FortiOS 7.6 Not affected Not Applicable FortiOS 7.4 through 7.4.2 Upgrade to 7.4.3 through 7.2.6

Military 101

Military Government Security IT 101

Troy Hunt

JULY 8, 2019

Subsequent updates to the corpus of breached passwords saw versions 3 and 4 arrive as more passwords flowed in from new breaches whilst the system also continued to grow and grow: Pwned Passwords in @haveibeenpwned is going from strength to strength - 16M requests in the last 24 hous with a cache hit ratio of 99.4% ??

Passwords 93

Passwords Authentication Data breaches IT 93

The Security Ledger

MARCH 13, 2019

» Related Stories Podcast Episode 129: Repair Eye on the CES Guy and Sensor Insecurity EU calls for End to Default Passwords on Internet of Things Podcast Episode 134: The Deep Fake Threat to Authentication and analyzing the PEAR Compromise. Read the whole entry. » CTIAs new certification is the toothiest standard going.

IoT 40

IoT Cybersecurity Authentication Passwords 40

Krebs on Security

NOVEMBER 29, 2023

In its initial incident reports about the breach, Okta said the hackers gained unauthorized access to files inside Okta’s customer support system associated with 134 Okta customers, or less than 1% of Okta’s customer base. “The Auth0/CIC support case management system was also not impacted by this incident.”

Authentication 233

Authentication Passwords Access Cloud 233