A common user mistake can lead to compromised Okta login credentials

Logged failed logins into a company’s Okta domain could be used by threat actors to discover access credentials of valid accounts, Mitiga researchers have found. Those credentials can then be used log in to any of the organization’s platforms that use Okta single sign-on (SSO) or – if the login credentials belong to an administrator – to gain privileged access to other systems or restricted network areas. How to discover valid Okta credentials in logs … More →

The post …

access access control accounts compromised credentials discover domain don't miss hot stuff log logging login login credentials logins mistake mitiga network okta organization platforms privileged privileged access researchers restricted sign single single sign-on sso systems threat threat actors user data valid