News for hackers. Stuff that matters.

A comment on Updated Okta Statement on Lapsus$. Parent comment

Re:Updated Okta Statement on Lapsus$ by Consultant32452 on Tuesday March 22, 2022 @03:13PM (#30770197)
Okta engineers stored some of their AWS keys in Slack. Depending on what those were the keys to it could be REALLY bad.

Off the top of my head: direct database access, http server - could push compromised pages to all Okta users

The AWS keys really could be the keys to the whole proverbial kingdom.

[ Parent | on HN ]
Re:Updated Okta Statement on Lapsus$ by dzhiurgis on Tuesday March 22, 2022 @04:34PM (#30771153)
FWIW organisation size of Okta probably has hundreds if not thousands of AWS keys. We really won't know which keys were that.
[ Parent | on HN ]
Re:Updated Okta Statement on Lapsus$ by rampole on Thursday March 31, 2022 @03:00PM (#30871012)
Do you have a reference for this? Thanks.
[ Parent | on HN ]