Okta says screenshots revealing hack stem from January incident
CBSN
Okta, an online identity authentication service used by thousands of U.S. companies to protect their computer networks, said a purported breach of its systems is related to an earlier incident this year. There are no signs of a current threat to Okta as a result of that event, the company told CBS MoneyWatch.
Okta's comment comes after a group calling itself Lapsus$ posted screenshots of what they claimed was the company's internal environment through the messenger service Telegram. They added, "For a service that powers authentication systems to many of the largest corporations (and FEDRAMP approved) I think these security measures are pretty poor." FedRAMP stands for the Federal Risk and Authorization Management Program, which oversees the use of cloud-based programs for federal agencies.
A hack at Okta could pose risks for corporations and workers, given that the service is used by more than 15,000 organizations. According to security firm Check Point Software, Lapsus$ is a cybercriminal group based in Brazil that has boasted about breaking into companies such as Nvidia, Samsung and Ubisoft. It is unclear how Lapsus$ hacked into those businesses, the firm added.

Washington — President Trump said early Monday that he is postponing airstrikes on Iran's power plants after "very good and productive conversations" over the last two days about reopening the Strait of Hormuz. However, Iran's foreign ministry denied any such talks. Claire Day contributed to this report. In:












