It was an eye opener to find out the security of the world’s most critical companies is more fragile than we thought due to the breach of a widely used identity management platform.
Just recently there was a potential breach of extensive source code of a big and secure organization like Microsoft -Bing search engine (Bing Maps and Cortana virtual assistant software) and Twitter meltdown in 2020’s where attackers included 17-year-old Minecraft scammer taking over an administrative account. However, this case is even more alarming and really, really bad…according to WIRED “Lapsus$ Extortion Group Claims Okta Hack, Microsoft Source Code Leak“.
On Monday, March 21st, a recently emerged hacking group by the name of Lapsus$ Gang claimed that it took control of an Okta administrative or “super user” account on January 21. It shared an online screenshot to back up its claim.
Established in 2009, Okta is an independent provider of an identity management platform. The Okta Identity Cloud is intended all organizations to both secure and manage their extended enterprise and used by thousands of large organizations to log in without juggling a dozen passwords.
The company’s stock price fell by 6 percent on Tuesday morning following the news. Lapsus$ has been stealing source code and valuable data from prominent companies like Nvidia, Samsung and Ubisoft.
Now for your reality check.
Is your organization’s identity management platform secure enough?
What can we learn from this incident?
- Establish strict access controls
- Establish multiple layers of security
- Do not let your system administrator’s access get compromised
How can RegDOX help with above areas and beyond?
End-to-End Protection
- Two-factor authentication and access permission
- Document and Email encryption
- Traceable delivery of documents
Collaboration with External parties
- Collaboration Center provides direct access to messages, tasks, and other items
- Integrated publishing allows approval and publishing of documents
Compliant with government regulations
- Secure Document viewer eliminates the risk of unauthorized downloads
- Operator shielding protects access by internal and external IT administrators
- Integrated two-person approval process
- Tamper-Proof Audit Trail allows time-stamped and recorded trail
- Watermarks provides additional protection against unauthorized forwarding
- Brainmark Management simplifies a secure distribution of Brainmark documents
If the features above had been implemented, Okta’s administrative access would not have been compromised. In addition, Okta’s reputation would not have been hurt so badly with lost trust in the company, which is supposed to be ‘secure’ platform.
See the enclave in action.
The Compliant Computing Enclave keeps CUI inside one boundary, with your endpoints out of scope and the evidence trail already built.
Talk to an Expert →