Re:When the House Lost: Lessons from the Recent Vegas Casino...
by rawgabbit on Thursday September 28, 2023 @12:27PM
(#37691959)
The Okta blog claimed the hackers had access to the users passwords or have already compromised Active Directory (Microsoft) and then used social engineering to reset MFA. In any case, this is a major mess. I believe we need the civilian version of login.gov sooner rather than later. The US Post Office can charge a fee every time it has to reset someone password after they verified who they are in person.
https://sec.okta.com/articles/2023/08/cross-tenant-impersona...