Tag Archives: mfa

4 Okta customers hit by campaign that gave attackers super admin control

Getty Images reader comments 25 with Authentication service Okta said four of its customers have been hit in a recent social-engineering campaign that allowed hackers to gain control of super administrator accounts and from there weaken or entirely remove two-factor authentication protecting accounts from unauthorized access. The Okta super administrator accounts are assigned to users… Read More »

How fame-seeking teenagers hacked some of the world’s biggest targets

Getty Images reader comments 11 with A ragtag bunch of amateur hackers, many of them teenagers with little technical training, have been so adept at breaching large targets, including Microsoft, Okta, Nvidia, and Globant, that the federal government is studying their methods to get a better grounding in cybersecurity. The group, known as Lapsus$, is… Read More »

Uber was breached to its core, purportedly by an 18-year-old. Here’s what’s known

Enlarge / The Uber ride-sharing app is seen on a mobile phone. reader comments 78 with 60 posters participating Share this story Uber employees on Thursday discovered that huge swaths of their internal network had been accessed by someone who announced the feat on the company Slack channel. The intruder, who sent screenshots documenting the… Read More »

I’m a security reporter and got fooled by a blatant phish

Enlarge / This is definitely not a Razer mouse—but you get the idea. (credit: calvio via Getty Images) There has been a recent flurry of phishing attacks so surgically precise and well-executed that they’ve managed to fool some of the most aware people working in the cybersecurity industry. On Monday, Tuesday, and Wednesday, two-factor authentication… Read More »

Lapsus$ and Solar Winds hackers both use the same old trick to bypass MFA

Getty Images reader comments 0 with 0 posters participating Share this story Multi-factor authentication (MFA) is a core defense that is among the most effective at preventing account takeovers. In addition to requiring that users provide a username and password, MFA ensures they must also use an additional factor—be it a fingerprint, physical security key,… Read More »