1Password Becomes Latest Victim of Okta Customer Service Breach

Okta's IAM platform finds itself in cyberattackers' sights once again, as threat actors mount a supply chain attack targeting Okta customer support engagements. [TechWeb]( Follow Dark Reading: [RSS]( October 25, 2023 LATEST SECURITY NEWS & COMMENTARY [1Password Becomes Latest Victim of Okta Customer Service Breach]( Okta's IAM platform finds itself in cyberattackers' sights once again, as threat actors mount a supply chain attack targeting Okta customer support engagements. [Israeli-Hamas Conflict Spells Opportunity for Online Scammers]( As the conflict in the Middle East rages, malicious actors look to exploit the situation with bogus charity sites encouraging donations. [Meet Rhysida, a New Ransomware Strain That Deletes Itself]( Emerging RaaS operation uses Rhysida ransomware paired with a wicked infostealer called Lumar, researchers warn. [Former NSA Employee Faces Life in Prison After Espionage Attempt]( The ex-employee claimed that he believed the shared information would benefit Russia and harm the US. [Cyberattacks on Kenya Drop in Third Quarter]( National response team attributes reduction to a cyber workforce with better training. [It's Time to Establish the NATO of Cybersecurity]( Cybercriminals already operate across borders. Nations must do the same to protect their critical infrastructure, people, and technology from threats foreign and domestic. [(Sponsored Article) The Need for Speed: When Cloud Attacks Take Only 10 Minutes]( Security sensors are common in the home for both prevention and response in the event something goes wrong. But in the cloud, have you taken the same approach? [MORE NEWS /]( [MORE COMMENTARY]( HOT TOPICS [9 Innovative Ways to Boost Security Hygiene for Cyber Awareness Month]( If we really want to move the dial on security habits, it's time to think beyond phishing tests. Our panel of CISOs and other security heavy-hitters offer expert tips that go beyond the obvious. [Telling Small Businesses to Buy Cyber Insurance Isn't Enough]( To protect themselves from threats, companies also need proactive cybersecurity. ['Log in with...' Feature Allows Full Online Account Takeover for Millions]( Hundreds of millions of users of Grammarly, Vidio, and the Indonesian e-commerce giant Bukalapak are at risk for financial fraud and credential theft due to OAuth misfires — and other online services likely have the same problems. [Top 6 Mistakes in Incident Response Tabletop Exercises]( Avoid these errors to get the greatest value from your incident response training sessions. [MORE]( EDITORS' CHOICE [Cyberattackers Alter Implant on 30K Compromised Cisco IOS XE Devices]( A seemingly sharp drop in the number of compromised Cisco IOS XE devices visible on the Internet led to a flurry of speculation over the weekend — but it turns out the malicious implants were just hiding. LATEST FROM THE EDGE [How State and Local Governments Can Serve Citizens More Securely]( The top 10 priorities of state CIOs underscore the importance of securing applications and APIs in complex environments. LATEST FROM DR TECHNOLOGY [Making the Case for Cryptographic Agility and Orchestration]( Finding the right post-quantum cryptographic (PQC) algorithms is necessary, but not sufficient, to future-proof cybersecurity. LATEST FROM DR GLOBAL [Strengthening Oman's Economic Backbone]( Creating a new regulatory framework to better secure Oman's banking system against future attacks. WEBINARS - [Building an Effective Active Directory Security Strategy]( For many organizations, Microsoft's Active Directory is the source of truth for user identity and system access. For criminals, Active Directory is a gold mine of information for moving laterally through the corporate infrastructure. Despite its importance, many security teams ... - [When Tech Converges, Orgs Consolidate: Navigating Change Across your Security Platforms]( Convergence trends across both Web Application and API Protection (WAAP) and Secure Access Service Edge (SASE) are no coincidence. Modern organizations need the multiplicative value these security platform approaches provide, with underlying capabilities that were designed to work together. And ... [View More Dark Reading Webinars >>]( WHITE PAPERS - [The Forrester Wave: External Threat Intelligence Service Providers, Q3 2023]( - [Threat Intelligence: Data, People and Processes]( - [Global Perspectives on Threat Intelligence]( - [Building Cyber Resiliency: Key Strategies for Proactive Security Operations]( - [Mandiant Threat Intelligence at Penn State Health]( - [9 Traits You Need to Succeed as a Cybersecurity Leader]( - [The Ultimate Guide to the CISSP]( [View More White Papers >>]( FEATURED REPORTS - [How to Deploy Zero Trust for Remote Workforce Security]( - [Concerns Mount Over Ransomware, Zero-Day Bugs, and AI-Enabled Malware]( - [Securing the Remote Worker: How to Mitigate Off-Site Cyberattacks]( The most profound change to enterprise security with the rise of remote work is the way endpoint security has moved from last line of defense to being on the frontline. The user's endpoint is the first device attackers encounter, making ... [View More Dark Reading Reports >>]( PRODUCTS & RELEASES [2023 Ransomware Attacks Up More Than 95% Over 2022, According to Corvus Insurance Q3 Report]( [Tines Report Finds More than Half of Security Professionals Likely To Switch Jobs Next Year]( [Accenture Expands Cybersecurity Services Capabilities in Latin America With Acquisition of MNEMO Mexico]( [AI 'Will Have a Significant Impact on Energy Industry,' EPRI Tells Congress]( [MORE PRODUCTS & RELEASES]( CURRENT ISSUE [The State of Supply Chain Threats]( [DOWNLOAD THIS ISSUE]( [VIEW BACK ISSUES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:ContactDarkReading@informa.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: /cdn-cgi/l/email-protection?sp_aid=118915&elq_cid=22844169&sp_eh=9ec2e0353644c03ce56099bfb161a49d1f8a5a22f0d884f0cd961b89d205d529&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Daily_10.25.23&sp_cid=50252&utm_content=DR_NL_Dark%20Reading%20Daily_10.25.23&sp_eh=9ec2e0353644c03ce56099bfb161a49d1f8a5a22f0d884f0cd961b89d205d529#a9 If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2023]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:ContactDarkReading@informa.com)