News for hackers. Stuff that matters.

A comment on Okta’s Investigation of the January 2022 Compromise. Parent comment

Re:Okta’s Investigation of the January 2022 Compromise by chaps on Wednesday March 23, 2022 @06:04AM (#30776833)
The screenshots by the attacking group claimed to have access to thousands of slack channels, many of which they say included API keys. It's likely that some or many of those were to prod services.
[ Parent | on HN ]
Re:Okta’s Investigation of the January 2022 Compromise by kasey_junk on Wednesday March 23, 2022 @08:21AM (#30777681)
This is the actual egregious thing in the breach. All of the support tool stuff seems like it was acting as designed and prevented the breach for sprawling.

The idea that at a security focused company they are passing around secrets via public slack channels is wild. That’s the thing they need to address.

[ Parent | on HN ]